In February, Orange's Romanian branch was hit by another cyberattack, with the company confirming the breach of a non-critical application after a threat actor using the alias 'Rey' claimed to have stolen thousands of internal documents containing employee data, user records, source code, invoices, contracts, and 380,000 email addresses. While Orange has not attributed the cyberattack to a specific hacking group or threat actor, the incident bears resemblance to a series of widespread breaches of telecom providers in the United States and worldwide that have been linked to China's Salt Typhoon cyber-espionage group. Orange, a French telecommunications company and one of the world's largest telecom operators, revealed that it detected a breached system on its network on Friday. The FBI and CISA confirmed in October that the Chinese Salt Typhoon state hackers had breached multiple telecom providers (including AT&T, Verizon, Lumen, Charter Communications, Consolidated Communications, and Windstream), as well as other telecom companies in dozens of other countries. The compromised system was discovered and isolated from the rest of the network by Orange Cyberdefense, the company's cybersecurity business unit, on July 25. Orange provides consumer communication services and business services to 294 million customers across Europe, Africa, and the Middle East, including 256 million mobile and 22 million fixed broadband customers. Last month, Comcast and Digital Realty were also tagged as potentially compromised by Salt Typhoon, with satellite communications company Viasat revealing weeks later that it had also been breached as part of the same attacks. Immediately alerted, with the support of Orange Cyberdefense, the teams mobilized fully to isolate the potentially affected services and limit the impact," the telecom giant said. Orange also provides IT and telecommunications services to multinational companies under the brand Orange Business, has 125,800 employees worldwide, and reported revenues of €40.3 billion in 2024.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Tue, 29 Jul 2025 14:30:26 +0000