Eurofiber reports data breach in France, major customers affected

"Eurofiber France reported on Sunday that the company had already discovered a data breach in its internal ticket management system and ATE customer portal on November 13. The attacker managed to gain access via a vulnerability in the software used, after which data was stolen. Eurofiber reports that the breach was quickly fixed and that the affected systems were immediately placed under increased surveillance. The company says it is working closely with cybersecurity specialists to further analyze the incident and strengthen security."

"However, external sources suggest a broader scope than Eurofiber indicates on its own website. International Cyber Digest speaks of approximately 3,600 possible victims. According to that channel, a leaked list includes major French companies and institutions, including Thales, Orange, TotalEnergies, the French railways, and several ministries. According to the FD, the data ranges from documents and identity cards to cloud configurations."

"In addition, according to Dark Web Informer, the stolen data has been offered for sale on the dark web. This indicates an attempt to monetize the stolen data. It remains unclear which parts of the published dataset can be directly traced back to Eurofiber and which may originate from other sources."

Eurofiber France discovered a data breach on November 13 in its internal ticket management system and ATE customer portal after an attacker exploited a software vulnerability to gain access and steal data. The company fixed the vulnerability quickly, placed affected systems under increased surveillance, and engaged cybersecurity specialists to analyze the incident and strengthen security. External sources report a broader scope, citing about 3,600 possible victims and leaked records naming major French companies and institutions, with data ranging from documents and identity cards to cloud configurations. Stolen data has reportedly been offered for sale on the dark web. Eurofiber states the impact is limited to French operations.

Read at Techzine Global