Telecoms company Orange has admitted data on 1.3 million current and potential customers has been compromised thanks to a successful attack on the firm’s systems.
Names, email addresses, phone numbers and dates of birth were all compromised in an attack that took place in April on a server used to send promotional emails and text messages. Credit card data was not pilfered, according to Reuters.
This is the second breach at Orange within three months. An attack reported in February led to the compromise of 800,000 people’s emails, passwords, addresses and phone numbers.
Orange has also been particularly vocal about data protection, making the breach even more embarrassing.
In November, the company’s chief executive Stephane Richard signed a charter on data protection, promising to keep customer data safe.
“Orange has done the right things following the breaches, but it is worrying that the details of such a large number of customers were apparently unencrypted in the first place,” said Steve Smith, managing director of data security firm Pentura.
“This highlights how critical it is for businesses like retailers and telecoms firms to encrypt the volumes of consumers’ personal data they hold, otherwise it’s a potential goldmine for hackers.”
The past six months have seen many of the world’s most famous companies fall victim to criminal hacks. US retail giants Target and Michaels were both breached, amongst numerous others.
Love IT security? Try our quiz!
US widening lead over China on AI development, as UK places third in Stanford index…
Amazon to invest a further $4bn into AI start-up Anthropic, doubling its investment as it…
The demand for tech skills is surging, driving economic growth but revealing challenges. Financial costs,…
US Supreme Court tosses Meta's appeal over Cambridge Analytica-linked investor lawsuit, meaning case must proceed
Uber reportedly seeks $10m stake in Chinese autonomous driving firm Pony AI via US IPO,…
iPhone maker reportedly developing next-generation AI large language model for Siri for spring 2026 as…