Data leak
Bouygues Telecom Data Breach - 6.4M French Customers (IBAN Exposed)
Primary Source βIncident Details
On August 4, 2025, Bouygues Telecom β France’s third-largest mobile phone carrier β detected a cyberattack. The company publicly disclosed the breach on August 6-7, 2025. Approximately 6.4 million customer accounts were compromised. Stolen data includes contact information, contractual data, civil status (or company data for professional subscribers), and IBANs (international bank account numbers). Credit card numbers and account passwords were not included. The breach was reported to France’s data protection authority (CNIL). Have I Been Pwned indexed the breach. The attack occurred in context of multiple French telecom breaches in 2025, following a similar cyberattack on Orange (France’s largest carrier). The combination of contact details and IBANs creates significant fraud risk for affected customers.
Technical Details
- Initial Attack Vector
- Cyberattack on Bouygues Telecom systems; specific initial access vector not publicly disclosed
Timeline
- 2025-08-04 Breach occurred
- 2025-08-07 Publicly disclosed
- 2025-08-07 Customers notified