Free, France’s second-largest internet service provider, confirmed this weekend that it had suffered a cyberattack, following the attempted sale of allegedly stolen customer information on a cybercrime forum. The Paris-based telecom company has filed a criminal complaint with the public prosecutor and notified France’s national cybersecurity agency after discovering the breach.
The company revealed that the attackers gained unauthorized access to an internal management tool used to manage customer accounts, compromising certain subscribers’ personal data. Free assured customers that passwords, bank card details, and communication contents were not affected. The telecom giant is now in the process of informing impacted subscribers via email.
Details regarding the total number of affected users remain undisclosed, although a cybercriminal recently listed two databases on a dark web forum, claiming the breach impacts over 19 million customers. Free has taken immediate steps to contain the breach and enhance its cybersecurity defenses.
This incident follows a similar cyberattack in September, when another French telecom operator, SFR, experienced a breach of its customer order management tool.

