Free

Disclosed Oct 26, 202413,926,173 accountsUnverified

Attack on Free management tool exposes subscriber data including IBANs

French ISP Free confirmed to AFP that a cyberattack on a management tool gave unauthorized access to personal data of some subscribers after a threat actor offered the data for sale; it said no passwords, bank cards or communications were affected. Have I Been Pwned later loaded about 14 million unique email addresses, many with IBAN bank account numbers.

What is known

People affected	13,926,173 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Oct 26, 2024
Happened	Oct 17, 2024
Attack	Hacking
Data exposed	FinancialDates of birthNamesPhone numbersAddressesEmails
Sector	Telecom · FR
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Free

Newssecurityaffairs.com

France's second-largest telecoms provider Free suffered a cyber attack

Notices filed

TotalOct 26, 2024

ResearchCount not stated

Accounts in the dataMay 27, 2025

Have I Been Pwned13,926,173 people

History of this record

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/FreeMobile to https://securityaffairs.com/170333/data-breach/free-suffered-a-cyber-attack.htmlby seedSource

country2026-09-25

empty to FRby seedSource

sector2026-09-25

tech to telecomby seedSource

attack2026-09-25

unknown to hackingby seedSource

data_types2026-09-25

["financial","dob","names","phone","addresses"] to ["financial","dob","names","phone","addresses","emails"]by seedSource

disclosed2026-09-25

2025-05-27 to 2024-10-26by seedSource

summary2026-09-25

In October 2024, French ISP "Free" suffered a data breach which was subsequently posted for sale and later, leaked publicly. The data included 14M unique email addresses along with names, physical addresses, phone numbers, genders, dates of to French ISP Free confirmed to AFP that a cyberattack on a management tool gave unauthorized access to personal data of some subscribers after a threat actor offered the data for sale; it said no passwords, bank cards or communications were aby seedSource

title2026-09-25

empty to Attack on Free management tool exposes subscriber data including IBANsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Free