850k Belgian Orange Customers Data Breached, Raising Sim-swapping Fears

Hackers gained entree to an Orange Belgium strategy containing names, telephone numbers, SIM numbers, PUK codes and customer tariff information, nan mobile telephone supplier said.

“As soon arsenic nan incident was discovered (in July), our teams blocked entree to nan affected strategy and strengthened our information measures,” nan institution said successful an charismatic statement dated August 20, a period aft nan breach. “The applicable authorities person been notified and an charismatic title has been revenge pinch nan judicial authorities,” nan institution added. The usability besides stated that it is contacting each impacted customers and has group up a specific web page explaining what was accessed, really it responded and providing information advice.

Infosecurity Magazine connected Thursday, August 21, said “the onslaught raises fearfulness of SIM swapping,  attacks targeting those affected.” They besides explained that PUK is an eight-digit information codification that tin beryllium utilized to unlock a SIM paper if an incorrect PIN is entered respective times. SIM swapping occurs erstwhile a victim’s telephone number is transferred to a cybercriminal’s ain SIM card, enabling them to intercept calls and messages intended for nan victim, including those containing one-time passcodes utilized for multi-factor authentication (MFA).

‘No further specifications revealed’

“Due to nan ongoing investigation, nary further specifications will beryllium disclosed to guarantee nan integrity of nan investigation and protect nan privateness of those involved,” Orange Belgium said. They did not reside nan imaginable of SIM-swapping attacks aliases really to protect themselves against nan PUK vulnerability.

Orange reported a cyber-attack affecting its French operations arsenic good successful precocious July, though it said that nary firm aliases customer information was accessed successful that incident.

Orange Belgium provides fixed and mobile connectivity services to complete 3 cardinal customers successful nan state and neighbouring Luxembourg. It employs 1,500 staff, and claims to run nan largest 4G/5G web successful nan country. Last year, nan institution reported full work revenues of 1.34 cardinal euros.