A hacker using the alias NullHumanity claimed that they had managed to identify a flaw in the customer login system of Freedom Mobile.
It claims to obtain private details of customers including their phone number, address, call history and other information effortlessly.
The hacker made claims on Freedom subreddit along with posting a screenshot of the code to prove successful brute forcing of Freedom Mobile’s user logins.
Hacker further claimed that the customer login system has been “forced to the Phone Number/PIN model,” which cannot be modified by the support center of the carrier as well.
The hacker also stated that currently 2,000 at-risk accounts have been identified on Freedom Mobile’s MyAccount page but he does not intend to exploit them.
Source: https://www.hackread.com/hacker-extracts-customer-data-from-canadian-telecom/
"id": "FRE21557622",
"linkid": "freedom-mobile",
"type": "Data Leak",
"date": "02/2018",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"