Overview

• The breach, discovered on August 4, was quickly contained when Bouygues Telecom’s security teams blocked unauthorized access.
• Hackers exfiltrated customer contact information, contract details, civil or business status data and IBANs but left passwords and payment card records untouched.
• All 6.4 million affected subscribers have been notified by SMS and email and advised to watch for phishing or fraud attempts.
• Under GDPR rules, Bouygues filed a detailed breach report with CNIL and lodged a formal complaint against the intruders.
• The incident follows last month’s attack on Orange and underscores rising threats from criminal and state-linked actors targeting France’s telecom infrastructure.