Freedom Mobile, a major player in the Canadian mobile phone market, announced that it has suffered a major data breachafter a malicious attack on its customer account management platform. Cybercriminals were able to gain access to personal information, with the total number of subscribers affected remaining unknown at this time.
A telecommunications giant with a history of growth
Founded in 2008 as Wind Mobile by Globalive, the company has gradually evolved into a benchmark for Canadian wireless communications. With over 2.2 million active subscribers and coverage that —according to the company—reaches 99% of the population, Freedom Mobile is a critical link in the telecommunications chain country's.
In 2023, the company was acquired by Vidéotron, a subsidiary of Québecor, in an acquisition that created the fourth largest mobile operator in Canada. The group now serves over 3.5 million mobile customers and employs approximately 7,500 people, confirming its strategic position in the market.
See also: Leroy Merlin reveals data breach
What kind of data was leaked?
According to the official announcement, the stolen data includes a wide range of personal information:
- Full names
- Residential addresses
- Dates of birth
- Telephone numbers (landline or mobile)
- Freedom Mobile account numbers
Although the company claims that there is no evidence of malicious use of the data following the breach, the scope of the leaked information is considered sufficient for attacks or social engineering.
Using a stolen subcontractor account – not ransomware
In a statement to BleepingComputer, a Freedom Mobile spokesperson said the attackers gained access by exploiting a stolen account of a subcontractor of the company. The incident was described as “limited in scale,” without disclosing the exact number of customers affected.
See also: Phoenix and Penn Universities Disclose Data Breach
The most important element is that the company clarified that this was not a ransomware attack and that its main telecommunications network and business operations were not affected.
Instructions to customers: Be vigilant against digital fraud
Despite the lack of evidence of direct data exploitation, Freedom Mobile urges users to remain cautious. Specifically:
- Do not open suspicious emails or messages that request personal information.
- Avoid clicking on links that appear misleading.
- Do not download attachments from unknown senders.
- Check their accounts frequently for unusual activity.
The company reminds that organized fraud attempts often start with seemingly innocent emails, which exploit data leaks like this one.
An incident that brings back memories from 2019
Freedom Mobile is no stranger to data breaches. In 2019, it confirmed another major incident, when a third-party vendor left a support database exposed online. That incident exposed information on approximately 15,000 customers, drawing heavy criticism for its security procedures at the time.
See also: “Executive Award”: Phishing campaign distributes Stealerium malware
The fact that a new breach appears five years later highlights the need for stricter control over subcontractors, better access management and systematic auditing.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The bigger picture: Telecommunications in the spotlight
The international trend shows that telecommunications companies are increasingly being targeted by cybercriminals. The huge concentration of personal data, combined with the critical importance of the services they provide, makes them particularly attractive targets.
Although Freedom Mobile appears to have averted the worst, the incident is yet another wake-up call for the entire industry: cybersecurity is no longer a secondary issue, but a foundation of a provider's operations.
What is going to happen?
The investigation is ongoing and more information is expected on the extent of the breach. Until then, users are urged to remain cautious, while Freedom Mobile should strengthen security procedures to ensure that such an incident does not occur again.
Source: www.bleepingcomputer.com
