According to PCINpact, My accounts page of website has been targeted by hackers on January 16. Hacker have gained access to personal data including names, email IDs, phone numbers, mail addresses and other details.
Orange states claims only personal information have been accessed by hackers, passwords have not been compromised in the Data Breach. Customers' bank account numbers are stored in separate server which is not impacted by this breach.
Few hours after became aware of the intrusion, the ISP immediately closed the "My Accounts" page to prevent further attack. The security hole responsible for the breach is said to have been closed.
The company said only 3% of its customers impacted by the breach. In an email sent to affected customers, the company warned them that the stolen data can be used by cyber criminals to launch phishing attacks.
The company has filed a complaint about the breach and working with Police.