Orange Romania, Orange Belgium and Orange: Ransomware hack hit Orange telecom, data published on dark web

Orange Hit by Ransomware Attack as Warlock Gang Leaks Stolen Business Data

French telecommunications giant Orange has confirmed a ransomware attack by the cybercriminal group Warlock, which resulted in the theft and publication of business customer data. The breach, disclosed to national authorities in late July, saw approximately four gigabytes of data posted to the dark web in mid-August.

According to sources familiar with the incident, the attack targeted Orange’s internal systems using ransomware leased by Warlock a group known for providing its malware to other hackers in exchange for a cut of ransom payments. While Orange acknowledged the data leak, a spokesperson stated that the compromised information was "outdated or low-sensitivity" and that affected businesses were notified prior to the public release. The company is collaborating with authorities and impacted clients to mitigate the fallout.

This incident marks the third major breach for Orange in 2024. In July, attackers accessed customer data from its Belgian division, while a separate attack exposed employee records from its Romanian operations on the dark web.

Telecom providers remain prime targets for cybercriminals due to the vast amounts of financial, government, and corporate data they handle. The repeated attacks on Orange underscore the growing threat to critical infrastructure in the sector.

Source: https://www.businesstimes.com.sg/companies-markets/telcos-media-tech/ransomware-hack-hit-orange-telecom-data-published-dark-web

Orange cybersecurity rating report: https://www.rankiteo.com/company/orange

"id": "ORA1770804300",
"linkid": "orange",
"type": "Breach",
"date": "8/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Business customers',
                        'industry': 'Telecommunications',
                        'location': 'France',
                        'name': 'Orange',
                        'size': 'Large',
                        'type': 'Telecommunications'}],
 'customer_advisories': 'Affected businesses notified',
 'data_breach': {'data_exfiltration': 'Yes',
                 'sensitivity_of_data': 'Outdated or low-sensitivity',
                 'type_of_data_compromised': 'Business customer data'},
 'date_publicly_disclosed': '2024-07',
 'description': 'French telecommunications giant Orange has confirmed a '
                'ransomware attack by the cybercriminal group Warlock, which '
                'resulted in the theft and publication of business customer '
                'data. The breach, disclosed to national authorities in late '
                'July, saw approximately four gigabytes of data posted to the '
                'dark web in mid-August.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': '4 GB',
            'systems_affected': 'Internal systems'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial gain',
 'ransomware': {'data_exfiltration': 'Yes',
                'ransomware_strain': 'Leased ransomware'},
 'references': [{'source': 'News article'}],
 'regulatory_compliance': {'regulatory_notifications': 'Disclosed to national '
                                                       'authorities'},
 'response': {'communication_strategy': 'Affected businesses notified prior to '
                                        'public release',
              'law_enforcement_notified': 'Yes'},
 'threat_actor': 'Warlock',
 'title': 'Orange Hit by Ransomware Attack as Warlock Gang Leaks Stolen '
          'Business Data',
 'type': 'Ransomware'}