Overview

• The intrusion exposed names, telephone numbers, SIM card numbers, PUK codes and tariff plans from one IT system.
• Orange Belgium says no passwords, email addresses or financial information were accessed.
• Affected customers are being notified by email or SMS and urged to watch for phishing, impersonation and potential SIM‑swap attempts.
• The company has informed authorities, filed a judicial complaint and says it knows the threat group but is withholding attribution pending the investigation.
• Orange says the incident is separate from the Orange Group breach disclosed in July and not linked to Salt Typhoon, while Belgian security experts criticized the company’s public response and called for stronger protections.