Data leak
Freedom Mobile Third-Party Vendor Breach
Primary Source βIncident Details
Freedom Mobile, one of Canada’s largest wireless carriers (owned by Shaw/Rogers), disclosed in December 2025 that a third-party vendor had been compromised, resulting in the exposure of customer data. The exposed information included customer names, home addresses, dates of birth, phone numbers, and account numbers. Freedom Mobile notified affected customers and the Office of the Privacy Commissioner of Canada (OPC) as required under PIPEDA breach notification obligations.
Technical Details
- Initial Attack Vector
- An unnamed third-party vendor used by Freedom Mobile was compromised, exposing customer account data stored in the vendor's systems
Timeline
- 2025-11-01 Breach occurred
- 2025-12-10 Publicly disclosed
- 2025-12-10 Customers notified