Orange Romania attacked again: hackers claim they’ve breached the company and have “very detailed” information

Babuk ransomware, a cybercrime ring that targets major enterprises, has posted unverified claims about a massive data breach at Orange, a major telecom, according to Cybernews. The cybercriminals said they hacked into Orange on Sunday, March 16th, and stole “all information related to orange.com and orange.ro from Romania.”

“We will publish 1TB if they do not want to negotiate with us,” Babuk ransomware threatens on its leak site on the dark web. “And there is still a lot more that we stole, the sample is not much.”

If the post is to be believed, Babuk ransomware has obtained 4.5 terabytes of “very detailed” information.

The hackers listed email addresses, customer records, source code, internal documents, invoices, contracts, projects, tickets, user data, employee data, messages, credit cards, call logs, and other personally identifiable information (PII) among the stolen data.

If confirmed, the breach could pose severe risks to impacted Orange customers, as their private data and communications could be used to perform a wide variety of cyberattacks and craft convincing lures for phishing attacks or business email compromise schemes.

“The leaked data presents serious risks to both employees and the organization, exposing sensitive personal and corporate information that could lead to identity theft, targeted attacks, and further exploitation by malicious actors,” said Neringa Macijauskaitė, Information Security Researcher at Cybernews.