Free.fr

In October 2024 the major French telecommunications provider Free.fr experienced a massive data breach affecting millions of customers. A threat actor known as RexData claimed responsibility for the cyberattack targeting the company management systems. The compromised database contained sensitive personal information including full names physical addresses and telephone numbers. More critically the leak involved International Bank Account Numbers IBAN and other billing details for a significant portion of the subscriber base. The company confirmed the incident following the discovery of unauthorized access to its customer management tool which led to the exposure of data belonging to approximately 14 million users.