Orange

The telecommunications company Orange reported being a victim of a cyberattack on Friday, affecting one of its information systems. This attack caused service disruptions for some of its corporate clients and a few public services, mainly in France. The company has filed a complaint and stated that as of the current stage of investigations, there is no indication that any customer or company data has been exfiltrated. Services and management platforms are expected to gradually reopen by Wednesday morning.

Source: https://www.bfmtv.com/tech/cybersecurite/l-operateur-orange-victime-d-une-cyberattaque_AD-202507290179.html

TPRM report: https://www.rankiteo.com/company/orange

"id": "ora852072925",
"linkid": "orange",
"type": "Cyber Attack",
"date": "7/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Enterprise clients and some '
                                              'public services',
                        'industry': 'Telecommunications',
                        'location': 'France',
                        'name': 'Orange',
                        'type': 'Telecommunications Company'}],
 'date_detected': '2023-07-28',
 'date_publicly_disclosed': '2023-07-31',
 'description': 'Orange, a telecommunications group, experienced a cyberattack '
                'on one of its information systems, leading to service '
                'disruptions for some of its enterprise clients and a few '
                'public services, mainly in France.',
 'impact': {'downtime': 'Some services and management platforms will reopen '
                        'gradually by Wednesday morning',
            'operational_impact': 'Service disruptions for enterprise clients '
                                  'and public services',
            'systems_affected': 'Some enterprise client services and a few '
                                'public services'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2023-07-31', 'source': 'Orange'}],
 'regulatory_compliance': {'legal_actions': "Filed a complaint for 'attack on "
                                            "its information system'"},
 'response': {'communication_strategy': 'Public announcement and updates',
              'containment_measures': 'Isolated potentially affected services',
              'incident_response_plan_activated': True,
              'law_enforcement_notified': True,
              'recovery_measures': 'Gradual reopening of services and '
                                   'platforms',
              'third_party_assistance': ['Orange Cyberdefense']},
 'title': 'Cyberattack on Orange Telecommunications',
 'type': 'Cyberattack'}