Ericsson discloses data breach, employee and customer data exposed
The US branch of telecom provider Ericsson has revealed that a “data security incident” occurred at one of its service providers.
Ericsson. Image by Davide Bonaldo/SOPA Images/LightRocket via Getty Images
The US branch of telecom provider Ericsson has revealed that a “data security incident” occurred at one of its service providers.
- Ericsson's hack gave attackers access to names, Social Security numbers, financial info, and even medical records.
- The breach happened in April 2025, but wasn't fully analyzed until February 2026.
- Ericsson is offering a year of free credit monitoring, though the company initially didn't disclose the number of victims.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
According to a data breach notification letter addressed to the Attorney General of the State of California, Ericsson’s service provider detected unauthorized access on April 28th, 2025.
Immediately after the discovery, the service provider initiated an investigation into the matter, with the assistance of external cybersecurity specialists. The FBI was also notified of the incident. Lastly, the service provider implemented additional security measures to minimize the risk of recurrence.
As part of the investigation, external data specialists launched a comprehensive review of the incident. This analysis was completed on February 23rd, 2026.
Check if your data has been leaked
The researchers discovered that some of the service provider’s files may have been accessed between April 17th, 2025, and April 22nd, 2025. The personal information potentially affected by this incident varied by individual but may have included their first and last name and Social Security number.
According to a separate filing with the Texas Attorney General, the exposed information also included dates of birth, driver’s license numbers, government-issued ID numbers, financial information, and medical information.
Ericsson has arranged to provide access to credit monitoring services for 12 months through IDX to individuals whose personal information was potentially affected by this incident, free of charge.
In addition, the telecom manufacturer is providing impacted individuals with guidance on how to better protect against identity theft and fraud, including advising individuals to report any suspected incidents of identity theft or fraud to their credit card company or bank.
Although the data breach notification letter doesn’t say how many victims were affected by the incident, a letter to the Attorney General of the State of Maine claims that 15,661 employees and customers have been impacted.
As of writing, no ransomware group has claimed responsibility for the data breach.
Unlock more exclusive Cybernews content on YouTube.