Orange Group Breach: Hacker Leaks Thousands of Documents
A significant security incident has impacted Orange Group, a leading French telecommunications company. A hacker, using the alias Rey and claiming affiliation with the HellCat ransomware group, has leaked thousands of internal documents. This Orange Group confirms breach involves sensitive data.
Details of the Orange Group Data Breach
The stolen data primarily originates from Orange’s Romanian branch. The leaked information includes:
- 380,000 unique email addresses.
- Source code.
- Invoices and contracts.
- Customer and employee information.
- Partial payment card details.
Rey stated the breach wasn’t a ransomware attack. They accessed Orange’s systems for over a month. Data exfiltration lasted approximately three hours undetected. Some data was outdated. Many payment card details had expired. The leak also contains information on Yoxo customers. This is Orange’s subscription service without a contract period.
Orange data leak posted on a hacker forum
Rey claims they obtained access by exploiting compromised credentials. They also utilized vulnerabilities in Orange’s Jira software and internal portals. Nearly 12,000 files (6.5GB) were stolen. A ransom note was left, but Orange didn’t negotiate.
Orange Group stated the breach occurred on a non-critical application. An investigation is underway to minimize the impact.
“Orange can confirm that our operations in Romania have been the target of a cyberattack,”
“We took immediate action, and our top priority remains protecting the data and interests of our employees, customers and partners. There has been no impact on customers’ operations, and the breach was found to occur on a non-critical back office application.”
The company is committed to providing updates and complying with legal obligations. They are cooperating with authorities.
Impact and Prevention
This Orange Group confirms breach highlights the importance of robust cybersecurity practices. Regular security audits, employee training, and patching vulnerabilities are crucial.
For more information on preventing similar breaches, see our articles on Ransomware and Cybersecurity.
Staying informed about the latest threats is also vital. Read our weekly cybersecurity news.
