Canadian telecommunications companies supplier Freedom Cell has disclosed a recent knowledge breach impacting the non-public info of a “restricted variety of prospects”.
The incident, the corporate says, was recognized on October 23, and was the results of credential compromise.
Particularly, a risk actor gained entry to a subcontractor’s account and used it to log in to Freedom Cell’s buyer account administration platform.
“We shortly recognized the incident and carried out corrective measures and safety enhancements, together with blocking the suspicious accounts and corresponding IP addresses,” the corporate says in an incident discover.
Private info compromised within the Freedom Cell knowledge breach contains names, addresses, cellphone numbers, dates of beginning, and buyer account numbers.
“Though we’ve no purpose to consider that this info was misused, we encourage you to comply with greatest practices to guard your knowledge,” the wi-fi provider’s discover reads.
Freedom Cell has not shared info on the attackers, nor did it say what number of prospects might need been affected.
The fourth-largest telecoms supplier in Canada following the 2023 acquisition by Quebecor subsidiary Vidéotron, the corporate has over 3.5 million subscribers.Commercial. Scroll to proceed studying.
SecurityWeek has emailed Freedom Cell for added info on the incident and can replace this text if the corporate responds.
This isn’t the primary Freedom Cell knowledge breach to turn into public. In 2019, the corporate confirmed that buyer private info was uncovered after a third-party service supplier did not safe an internet-accessible database.
Whereas preliminary studies claimed that over 1.5 million folks had been impacted by the incident, Freedom Cell downplayed the impression, saying that solely 15,000 prospects had been affected.
Associated: Asahi Knowledge Breach Impacts 2 Million People
Associated: Spanish Airline Iberia Notifies Prospects of Knowledge Breach
Associated: 146,000 Impacted by Delta Dental of Virginia Knowledge Breach
Associated: Pennsylvania Legal professional Basic Confirms Knowledge Breach After Ransomware Assault
