Cyber Incident Victim: Bouygues Telecom
Date:
Nov 2025
Location:
France
Summary
Bouygues Telecom experienced a cyberattack that allowed unauthorized access to personal data of approximately 6.4 million customer accounts. The operator resolved the incident swiftly, implemented additional security measures, notified the CNIL and filed a complaint with judicial authorities. Affected customers were informed by email or SMS, and a dedicated web page and toll‑free number were made available to provide assistance and information.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Bouygues Telecom announced on 6 August 2025 that it had been the victim of a cyberattack that allowed unauthorized access to certain personal data of 6.4 million client accounts. The company stated that the incident had been resolved in the shortest possible time by its technical teams. All necessary complementary measures were put in place following the detection of the breach. The announcement did not specify the exact date when the attack occurred or the precise nature of the data that was accessed. The statement emphasized that the situation had been brought under control promptly. No further technical details about the attack vector or affected systems were provided in the announcement.
In response to the incident Bouygues Telecom notified the Commission nationale de l’informatique et des libertés (CNIL) and filed a complaint with the judicial authorities. All customers whose data may have been affected were informed or will be informed by email or SMS. The company made a dedicated web page and a toll‑free number at 0801 239 901 available for assistance. Bouygues Telecom’s teams remain fully mobilized to accompany the concerned customers. Additionally, the Bouygues Telecom Mag published a full dossier on the security of personal information. The announcement concluded with the assurance that the operator continues to monitor the situation and support those impacted.