From Friday evening and during the weekend, Free sent emails to its customers (landline and mobile) to inform them of a leak of personal data following a “ cyberattack targeting a management tool ».
Hacker publishes file with 100,000 lines
« Name, first name, email and postal addresses, date and place of birth, telephone number, subscriber identifier and contractual data (type of offer subscribed, date of subscription, active subscription or not) » were recovered by the hacker(s). “ None of your passwords are affected », still happy…
The operator was not talking about a leak of banking data, even though the hacker claimed to have five million IBANs in his possession. This weekend, after the first emails from Free, the hacker put a text file online for anyone who wants to download it with “ more than 100,000 French IBAN lines from Free customers ».
Data auction for $70,000
« A copy of the data is about to be sold for more than $70,000. If the company does not participate in this one auction in the coming days, this copy will be sold, resulting in serious consequences for customers, and will likely be publicly disclosed on forums in the near future », adds the pirate.
Free confirms IBAN leak and warns its customers
There we find the data listed by Free, but also IBANs. Contacted, Free confirms to us that “ the IBANs of certain subscribers were affected and they were informed by email “. This only concerns Freebox customers (on landlines). The operator does not give figures on the extent of the damage, so it is impossible to confirm the 19 million customers affected and the 5 million emails announced by the hacker.
Indeed, in an email received this morning for one of our lines (with a Freebox), the message is no longer quite the same:
« We are writing to inform you that Free has been the victim of a cyberattack targeting a management tool.
This attack led to unauthorized access to part of the personal data associated with your subscriber account: name, first name, email and postal addresses, telephone number, subscriber identifier, IBAN and contractual data (type of offer subscribed, date of subscription , active subscription or not) ».