Cell C Alerts Fibre Customers to Data Breach After Third-Party Incident
South African telecom operator Cell C has notified its fibre customers of a potential data breach stemming from a cybersecurity incident at a third-party service provider on 9 September. According to reports from MyBroadband.co.za, compromised access credentials at the provider enabled unauthorized access to customer records.
The exposed data is currently limited to names, email addresses, mobile numbers, and Cell C account numbers. Cell C has confirmed that its investigation is ongoing, but no further details on the scope or the identity of the affected third party have been disclosed.
The breach highlights the risks associated with third-party vendor security, particularly in the telecom sector, where customer data is frequently shared across service providers. Cell C has not indicated whether additional measures, such as credit monitoring or breach notifications, will be offered to impacted customers.
Source: https://www.telecompaper.com/news/cell-c-warns-fibre-customers-about-possible-data-breach--1582561
Waves Telecom & Technology cybersecurity rating report: https://www.rankiteo.com/company/waves-telecom-&-technology
Cell C cybersecurity rating report: https://www.rankiteo.com/company/cell-c
"id": "WAVCEL1789374433",
"linkid": "waves-telecom-&-technology, cell-c",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Fibre customers',
'industry': 'Telecommunications',
'location': 'South Africa',
'name': 'Cell C',
'type': 'Telecom Operator'}],
'attack_vector': 'Compromised third-party credentials',
'customer_advisories': 'Notification to fibre customers about potential data '
'exposure',
'data_breach': {'personally_identifiable_information': 'Names, email '
'addresses, mobile '
'numbers, account '
'numbers',
'sensitivity_of_data': 'Moderate',
'type_of_data_compromised': 'Personal Identifiable '
'Information (PII)'},
'date_detected': '2023-09-09',
'description': 'South African telecom operator Cell C has notified its fibre '
'customers of a potential data breach stemming from a '
'cybersecurity incident at a third-party service provider. '
'Compromised access credentials at the provider enabled '
'unauthorized access to customer records, exposing names, '
'email addresses, mobile numbers, and Cell C account numbers.',
'impact': {'brand_reputation_impact': 'Potential brand reputation impact due '
'to third-party breach',
'data_compromised': 'Names, email addresses, mobile numbers, Cell '
'C account numbers',
'identity_theft_risk': 'Potential identity theft risk'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Highlights risks associated with third-party vendor '
'security in the telecom sector.',
'post_incident_analysis': {'root_causes': 'Compromised third-party '
'credentials'},
'references': [{'source': 'MyBroadband.co.za'}],
'response': {'communication_strategy': 'Customer notification'},
'title': 'Cell C Fibre Customer Data Breach Due to Third-Party Incident',
'type': 'Data Breach'}