Data leak

Bouygues Telecom Data Breach - 6.4M French Customers (IBAN Exposed)

πŸ“… 2025-08-04
Primary Source β†—

Incident Details

On August 4, 2025, Bouygues Telecom β€” France’s third-largest mobile phone carrier β€” detected a cyberattack. The company publicly disclosed the breach on August 6-7, 2025. Approximately 6.4 million customer accounts were compromised. Stolen data includes contact information, contractual data, civil status (or company data for professional subscribers), and IBANs (international bank account numbers). Credit card numbers and account passwords were not included. The breach was reported to France’s data protection authority (CNIL). Have I Been Pwned indexed the breach. The attack occurred in context of multiple French telecom breaches in 2025, following a similar cyberattack on Orange (France’s largest carrier). The combination of contact details and IBANs creates significant fraud risk for affected customers.

Technical Details

Initial Attack Vector
Cyberattack on Bouygues Telecom systems; specific initial access vector not publicly disclosed

Timeline

  1. 2025-08-04 Breach occurred
  2. 2025-08-07 Publicly disclosed
  3. 2025-08-07 Customers notified