Freedom Mobile

An Elasticsearch server containing up to 1.5 million Freedom Mobile users’ personal data was exposed in a data breach.

The files, stored in plaintext, also held customer names, email and postal addresses, home and mobile phone numbers, birth dates, IP addresses connected to payment methods, customer types, and account numbers.

A Freedom Mobile spokesperson for the company said the incident affected 15,000 customers.

Source: https://www.cutimes.com/2019/05/13/1-5-million-mobile-users-card-information-exposed/?slreturn=20230224112913

TPRM report: https://scoringcyber.rankiteo.com/company/freedom-mobile

"id": "fre205924323",
"linkid": "freedom-mobile",
"type": "Breach",
"date": "05/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 15000,
                        'industry': 'Telecommunications',
                        'name': 'Freedom Mobile',
                        'type': 'Telecommunications Company'}],
 'data_breach': {'data_encryption': 'No',
                 'number_of_records_exposed': 1500000,
                 'personally_identifiable_information': ['names',
                                                         'email addresses',
                                                         'postal addresses',
                                                         'home phone numbers',
                                                         'mobile phone numbers',
                                                         'birth dates',
                                                         'IP addresses '
                                                         'connected to payment '
                                                         'methods'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII', 'Account Information']},
 'description': 'An Elasticsearch server containing up to 1.5 million Freedom '
                'Mobile users’ personal data was exposed in a data breach. The '
                'files, stored in plaintext, also held customer names, email '
                'and postal addresses, home and mobile phone numbers, birth '
                'dates, IP addresses connected to payment methods, customer '
                'types, and account numbers.',
 'impact': {'data_compromised': ['customer names',
                                 'email addresses',
                                 'postal addresses',
                                 'home phone numbers',
                                 'mobile phone numbers',
                                 'birth dates',
                                 'IP addresses connected to payment methods',
                                 'customer types',
                                 'account numbers']},
 'title': 'Freedom Mobile Data Breach',
 'type': 'Data Breach'}