The telecommunications company has informed customers in Spain that one of its suppliers has suffered a “security breach”
A “security breach” at one of Orange in Spain’s suppliers, specifically a debt collection service, has exposed sensitive customer data of a “limited number of clients”.
The telecommunications multinational has not revealed exactly how many customers have been compromised by the cyber attack, but all affected users have reportedly been alerted to the leak via email or text message.
The security incident has also been reported to the National Police’s Central Technological Investigation Brigade and the Spanish Data Protection Agency.
In a statement sent to customers alerting them to the situation, Orange warned that “part of the sensitive information to which (the debt collection provider) had access to carry out the customer management activity for which it was hired” has been leaked by the security breach.
The exposed sensitive data of a “limited number of clients” includes the name, surnames, postal address, telephone, email, DNI/NIE numbers, date of birth, nationality and the IBAN code of the current account of some clients, according to the Spanish National Cybersecurity Institute of the Ministry of Economic Affairs and Digital Transformation.
The statement continues: “As soon as the provider became aware of the incident, a plan was put in place to limit its scope, and access to our systems was immediately cut off.”
The National Institute of Cybersecurity (INCIBE), through the Internet Security Office (OSI), has also sent out an alert “of high importance” regarding the Orange security breach.
It reads: “If you have received the communiqué from the affected company, we advise you to be especially cautious over the next few months with emails, messages or calls from which you cannot confirm their origin or sender, especially messages requesting banking information or credentials. These messages could be fraudulent.
“In case your bank details have been affected by the incident, check your latest bank movements. If you detect any unknown movement, contact your bank to take the appropriate measures.”
Image: Orange Spain
Source: Murcia Today
