Orange Romania has officially addressed a recent cyberattack targeting one ticket resolution application. According to the company, the hacker exploited a vulnerability in the system and fraudulently obtained an internal user’s credentials (username and password).
What Data Was Exposed?
The company has clarified that the breach led to the exposure of sensitive information, including:
- YOXO customer data: full names, usernames, phone numbers, and email addresses.
- Professional contact details of employees: names, job titles, and email addresses.
- Contact details of authorized representatives of business clients: phone numbers and email addresses.
Orange Romania is in the process of notifying affected customers and urges all clients to remain vigilant against phishing attempts and fraudulent calls. The company acknowledges the severity of the situation and reassures customers and partners that protecting their data remains a top priority.
Services and Network Remain Unaffected
Orange has emphasized that its core services and network were not impacted by the breach. The company has taken measures to mitigate the effects of the attack and has implemented additional security actions. Furthermore, Orange is complying with legal obligations and is cooperating with relevant authorities to investigate the incident.
Who Is Behind the Attack?
The attack has been claimed by a hacker known as Rey, affiliated with the HellCat network. In an interview with BleepingComputer, a cybersecurity news outlet, Rey stated that he had access to Orange’s systems for over a month but did not act on behalf of the HellCat ransomware group.
According to the hacker, he stole nearly 12,000 files, amounting to approximately 6.5GB of data, after exploiting multiple vulnerabilities. The first reports of the breach surfaced when Rey posted details about the stolen data on a forum. Before making the information public, he allegedly attempted to extort Orange for payment in exchange for the data, but his efforts were unsuccessful.
About YOXO
YOXO is Orange Romania’s fully digital, flexible subscription service designed for individual customers who either want a new subscription or wish to transfer their existing number from an Orange subscription or prepaid card.
This cyberattack highlights the ongoing risks companies face in securing sensitive customer and employee data. Orange Romania’s response, including immediate security reinforcements and collaboration with authorities, demonstrates the growing need for robust cybersecurity measures. For now, affected customers are advised to stay alert for potential fraud attempts.
