Orange Group Hacked - User Data Stolen
A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the Romanian systems of Orange Group, a leading French telecom service.
The alleged breach includes source code, internal invoices, client contracts, project blueprints, and user data, raising concerns about operational security and customer privacy.
The hacker, known as 'Rey' is a member of the HellCat ransomware group. After failing to extort the company, Rey publicly posted details about the stolen data on a hacker forum after trying to extort the company unsuccessfully.
- Source code repositories for customer management systems and network infrastructure tools were reportedly exposed, potentially compromising proprietary technology.
- Financial documents, such as invoices and service agreements with enterprise clients, were also included in the dump, which could reveal contractual terms and pricing structures.
- Furthermore, Rey has claimed that 380,000 email addresses linked to Orange’s consumer and business accounts were extracted, though password hashes or payment details were not specifically mentioned.
Independent audits indicate that the leak following a lengthy period without a major security update to Orange’s employee authentication portals. Although hypothetical, there have been suggestions that the breach resulted from a combination of phishing attacks and exploitation of unpatched vulnerabilities in Orange’s cloud storage systems,
Cyber security experts say that exposed email addresses could fuel targeted phishing campaigns or credential-stuffing attacks across other platforms.
Orange Communication issued a brief statement acknowledging “irregularities in its data logs” but stopped short of confirming the breach. The company emphasised that its core networks remain secure and urged customers to enable two-factor authentication as a precaution.
Regulatory bodies in the European Union have made their own preliminary inquiries to explore the possibility of a violations of the General Data Protection regulation (GDPR).
Orange | Bleeping Computer | Tech Radar | GB Hackers | Cybersecurity News | Techzine |
Image: @orange
You Might Also Read:
Salt Typhoon Exploited Cisco Vulnerabilities:
If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.
- Individual £5 per month or £50 per year. Sign Up
- Multi-User, Corporate & Library Accounts Available on Request
- Inquiries: Contact Cyber Security Intelligence
Cyber Security Intelligence: Captured Organised & Accessible
