Cyberattack Hits Bouygues Telecom, Leaving Data of 6.4 Million Customers at Risk

Bouygues Telecom has suffered a security breach affecting the personal data of 6.4 million customers. The telecom provider is now investigating the incident, as concerns grow over potential risks to user privacy and the possible misuse of sensitive information.
Tl;dr
- Bouygues Telecom suffers major data breach affecting millions.
- Sensitive information, including IBANs, now at risk of fraud.
- Vigilance and strong security measures are strongly advised.
Surge in Data Breaches Across French Telecom Sector
The French telecommunications landscape has entered a period of unprecedented turbulence. Following recent incidents at Free and SFR, it is now Bouygues Telecom that finds itself grappling with the fallout from a major cyberattack. Detected on August 4 and confirmed two days later, the breach has placed the personal data of some 6.4 million customers at risk. Once alerted, internal teams acted swiftly to contain the threat, while promptly notifying both the CNIL and other relevant authorities—a standard protocol, though one increasingly called upon these days.
The Scope and Risks: What Was Actually Compromised?
While Bouygues Telecom has assured that neither passwords nor bank card numbers were accessed by attackers, there is little comfort in the details that have surfaced. The compromised trove reportedly includes full contact details, contractual information, civil status and professional data—and crucially, numerous IBAN codes. For industry observers like Marijus Briedis, CTO at NordVPN, this element escalates concerns significantly: « This opens wide the door to sophisticated scams ». A convincing phone call or email—posing as a company representative—can easily prompt unsuspecting victims to divulge sensitive payment information under plausible pretenses such as a supposed issue with direct debit.
Cascading Threats and a Booming Underground Market
What makes this incident particularly unsettling is its place within a larger pattern. Over recent months, attacks on French telecom operators have become almost routine; Free was targeted last October, followed by SFR in November. The underlying reason is straightforward: operators are custodians of vast repositories of high-value personal data—a veritable goldmine for cybercriminals. Recent estimates from NordVPN suggest that these stolen records are already circulating on the dark web, fetching up to 55 euros per complete account. For criminals, just the haul from Bouygues Telecom could amount to several hundred million euros.
Practical Steps: Protecting Yourself Now
Given this wave of breaches—and the increasing sophistication of threats driven by advances in generative AI—customers should adopt heightened security habits. Experts recommend three key actions:
Monitor bank accounts closely; alert your bank to any unusual activity.
Exercise caution with unsolicited messages requesting information; always verify directly with the company using official channels.
Above all else, never disclose banking details via phone or email—even when communications appear legitimate. Tools like Link Checker can offer an extra layer of protection against phishing attempts. As technology evolves so too must our vigilance—the stakes have rarely been higher for consumers navigating today’s digital threats.