SFR victim of a cyberattack: Fiber subscriber data exposed

Day zero since France has not announced a cyberattack (yes, the count is being done quickly). This time it was the telecommunications operator SFR which was affected.

“SFR detected a security incident following an act of cyber malicious intent, the consequences of which could have resulted in the temporary accessibility of data linked to Fiber subscriber lines such as the address, email or telephone number,” indicated the operator, without specifying the total number of customers affected. “Passwords and banking data are not affected,” he added.

An attack quickly detected and stopped

The hack, detected on July 2 by SFR security teams, targeted a “Fiber connection analysis management tool”, according to the letter sent to subscribers. The operator claims to have immediately cut off the access concerned and put in place additional protection measures.

This data breach was notified to the National Commission for Information Technology and Liberties (Cnil), a mandatory measure since 2018, and a complaint was filed with the Public Prosecutor, said SFR.

Bad times for French data

The operator had already experienced a cyberattack in 2024 during which the bank details of certain customers were leaked.