Orange Belgium Data Breach Impacts 850,000 Customers

Orange Belgium, a subsidiary of the global telecommunications group Orange SA, confirmed a significant cyberattack affecting approximately 850,000 customer accounts. The breach involved unauthorized access to an internal IT system, exposing personal data such as full names, phone numbers, SIM card numbers, PUK codes, and tariff plans. Importantly, sensitive information, including passwords, email addresses, or financial data was not compromised, according to the company’s official statements. Upon detection, Orange Belgium promptly isolated the affected system, strengthened its cybersecurity measures, and notified judicial authorities while communicating transparently with impacted customers through emails and text messages. The company emphasized vigilance against potential phishing attempts or other suspicious communications as a precautionary measure.
Although the specific threat actor has not been publicly named, Orange Belgium confirmed that the incident was not linked to the Chinese cyber-espionage group “Salt Typhoon,” which has historically targeted telecom providers. The company indicated awareness of the actor’s identity but withheld details due to the ongoing investigation. Analysts and cybersecurity observers highlighted that this incident underscores the growing risk to telecommunications infrastructure globally and the critical importance of robust security protocols, rapid incident response, and transparent customer communication. Orange Belgium’s swift mitigation, combined with adherence to regulatory and data-protection standards, demonstrates a measured and formal approach to handling large-scale breaches while minimizing operational and reputational impact.