A threat actor compromised 850,000 Orange Belgium customer accounts, exposing SIM card numbers and PUK codes, raising concerns about SIM swapping attacks. Orange has responded with additional security measures, but expert opinions question their effectiveness and transparency. #Warlock #SIMSwapping
Keypoints
- Affected data includes SIM card numbers, PUK codes, and customer personal information.
- The incident was detected in late July and claimed by the Warlock ransomware group.
- Orange Belgium implemented extra verification steps but faced criticism for limited effectiveness.
- Orange’s communication downplayed the breach’s severity, leading to accusations of deception.
- The attack is potentially linked to exploitation of vulnerabilities in the Microsoft SharePoint ‘ToolShell’ chain.
Read More: https://www.infosecurity-magazine.com/news/orange-data-breach-sim-swapping/