The telecoms giant warned that customers were going to be affected by its response to the attack, however, it did not disclose the incident itself. In a statement, the company said: “At this stage of the investigation, there is no evidence to suggest that any customer or Orange data has been extracted. We remain vigilant in this regard.” The attack took place on Friday 25 July, with the group detecting a cyberattack on its information systems, with Orange Cyberdefense teams mobilising and isolating the potential attack to mitigate the impact. “However, these isolation operations have resulted in the disruption of certain services and management platforms for some of our corporate customers and some consumer services, primarily in France. Our dedicated teams are fully mobilised to inform and support affected customers,” Orange stated. “Our teams have identified and are implementing solutions that will allow, under heightened vigilance, the gradual reopening of the main impacted services by Wednesday morning [30 July]. It added that a complaint has been filed and the relevant authorities have been alerted. “At this stae of the investigation, there is no evidence to suggest that any customer or Orange data has been extracted. We remain vigilant in this regard,” it added. The attack follows Orange confirming earlier this year that it experienced a separate cyber attack in March. At the time, a member of the HellCat ransomware group, known as Rey, gained access to a “non-c

Internal Threats Now Dominate Cybersecurity Incidents, New Data Shows Internal threats have overtaken external attacks as the leading cause of cybersecurity incidents, accounting for 57% of all cases a first in recent years, according to new research from Orange Cyberdefense. The findings, highlighted by Tech Radar, reveal a sharp rise in insider-related risks, driven by employee misuse, shadow IT, and exploitation of routine behaviors. Key drivers of the shift: - Employee misuse makes up 45% of internal incidents, surpassing hacking (31%). - Shadow IT the use of unauthorized tools has become a major vulnerability, with 53% of incidents involving employee devices. - Identity-based attacks have surged, rising from 10% to 17% of cases. Carl Morris, Senior Security Researcher at Orange Cyberdefense, emphasized that policy workarounds and lax controls are increasingly exploited by attackers, making internal threats as damaging as sophisticated external breaches. The report underscores the need for organizations to strengthen access controls and adopt multi-factor authentication to mitigate growing risks. The data reflects a broader trend: as external defenses improve, attackers are pivoting to human-centric vulnerabilities within organizations.

Orange Cyberdefense apparently suffered a data breach incident after a popular forum offered data allegedly from their firm. Data in the sample included Contact Name, Email, Phone Number, Company Name, and Solution Name. The listing also offered to sell access to Orange Cyberdefense’s servers.