Digi

Digi is a telecommunications provider operating in Spain, known to customers under the alias Org 382d49ed-7d29-4f62-934d-e839617736d1. The company offers telecommunications services, though specific details about its product portfolio, market segments, or geographic reach beyond its Spanish headquarters are not publicly disclosed in available incident reports. Its operations involve handling customer personal data as part of its service delivery, a common requirement in the telecommunications sector for account management and regulatory compliance. The organization maintains standard cybersecurity protocols typical of European telecom operators, including collaboration with authorities during incident investigations.

On April 21, 2023, Digi experienced a significant cybersecurity incident involving unauthorized access to its systems. Attackers targeted customer information repositories, successfully exfiltrating personal data belonging to a subset of clients. The company responded by implementing containment measures and initiating a forensic investigation with relevant authorities. While Digi confirmed the breach compromised general customer information, it explicitly denied exposure of highly sensitive identifiers such as national ID numbers or financial account details. This incident highlighted the organization's exposure to common threat actor tactics targeting telecommunications infrastructure for data theft. The event triggered standard breach notification procedures under EU data protection regulations, though specific customer impact metrics or technical details about the attack vector remain undisclosed in public reporting. No subsequent incidents or operational changes have been documented in the available source material.