New red alert at Free: a hacker gives away 100,000 subscribers' IBANs for free

© Shutterstock

He has Free, he didn't understand everything. This week, the company was the target of a cyberattack of unprecedented scale. 19 million customer data were for sale on the dark web. Among them, 5 million IBANs were available. In any case, this is what the X account called SaxX indicated. An account to be taken seriously since it is the source of information for the many leaks that have taken place in recent months at Free or SFR but also at various institutional sites.

Today, this same account indicates that 100,000 IBANs out of the 5.11 million held by the hacker have been distributed for free on the “Amazon of cybercrime”. Why would the hacker behind this leak have revealed data that he had put up for sale for 10,000 euros (and now valued at 70,000 dollars)?? According to SaxX, this is retaliation for Free's reaction published yesterday.

Free didn't understand everything

“This new publication is certainly in reaction to the Free email, probably which it found lax… and which hardly mentioned the compromise of IBANs…” indicates SaxX on his X account. And to add :

His message is also unequivocal with a photo taking up the title of Xavier Niel's latest book, “A sacred desire to fuck up !” (…) We are facing the biggest hack of a telephone operator in France !

Free took a long time to respond to the initial threat. The Presse-citron editorial team, which contacted Free the same day to confirm the attack, never received a response from the company. Yesterday, during the day, we received an email from the operator intended for its subscribers. Free confirms that millions of personal data have been stolen by a hacker, confirming the attack at the beginning of the week. On the other hand, Free never mentions the 5.11 million IBANs put up for sale. Here is an excerpt from the email sent by Free:

We are writing to inform you that Free has been the victim of a cyberattack targeting a management tool. This attack resulted in unauthorized access to some of the personal data associated with your subscriber account: surname, first name, email and postal addresses, date and place of birth, telephone number, subscriber ID and contractual data (type of offer subscribed to, subscription date, active subscription or not).

Depending on the subscribers, Free indicates whether your account is among those affected by the attack (we are spared). But at no time did the operator indicate that banking data had been stolen. SaxX's hypothesis seems to be confirmed: the hacker allegedly leaked 100,000 IBANs in order to prove that the data sold did indeed contain this information.

For the time being, Free has not responded to this new data leak. Our various requests to the press service have been unsuccessful for the moment. We will be sure to update this article as soon as we know more.

• 100,000 IBANs of Free subscribers have been put online for free on the “Amazon of cybercrime”
• The hacker behind this leak is the same one who leaked the personal data of 19 million customers earlier this week
• This leak appears to be retaliation for Free's reaction after the first attack

📍 To not miss any Presse-citron news, follow us on Google News and WhatsApp.