France -based Orange has been breached for the second time this year, affecting over 1.3 million customers.
In mid-April, hackers gained access to the platform used by Orange to send e-mails and SMS to its subscribers, according to the Connexion report.
The company sent an email to affected customers, which contains a link with the option “click to call you.” Users who click on the link will receive a call from Orange.
The personal data accessed by hackers included names, email addresses, landline and mobile phone numbers, dates of birth, as well as the names of mobile and internet carriers.
No payment information or credit card numbers, and passwords were not exposed in this breach.
However, the main risk in this case is that the compromised data could be used by malicious actors to launch phishing attacks. Such attacks appear to come from legitimate organizations and trick users into providing their passwords and financial data.
