Orange Belgium discloses data breach affecting 850,000 customers
Orange Belgium has announced that it discovered a cyberattack on one of its IT systems, resulting in unauthorized access to personal data from 850,000 customer accounts.
Image by Cybernews.
Orange Belgium has announced that it discovered a cyberattack on one of its IT systems, resulting in unauthorized access to personal data from 850,000 customer accounts.
The incident occurred at the end of July. A hacker managed to exfiltrate personal information, including full names, phone numbers, SIM card numbers, tariff plans, and PUK codes. PUK stands for Personal Unblocking Key, which is a unique code to unblock a blocked SIM card.
According to Orange Belgium, no critical data was compromised, such as passwords, email addresses, bank numbers, or other financial details.
“As soon as the incident was discovered, our teams blocked access to the affected system and strengthened our security measures. Orange Belgium also alerted the relevant authorities and filed an official complaint with the judicial authorities,” the telecommunications company states in a press release.
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
All affected customers have been or will be notified by email or text message about the data breach. The provider is recommending people to remain vigilant for any suspicious activities, including identity theft and phishing.
On a dedicated FAQ page, Orange Belgium advises to regularly change the passwords of online accounts, only use strong passwords, never use the same password twice, be aware of suspicious URLs and messages, and never share confidential codes or passwords.
This is the third time this year that Orange has had to deal with hackers. In February 2025, a threat actor called “Rey” claimed that he had accessed Orange’s corporate network and stolen almost 12,000 files, for a total of 6.5GB. The documents contained information from former and current Orange Romania employees, partners, and contractors, along with partial details for payment cards belonging to Romanian customers.
In July, Orange Group detected a cyberattack on one of its IT systems, but no customer data was stolen. The company notified the relevant authorities and filed a formal complaint with French law enforcement agencies.
