Data Leak Exposes 70,000 Customers of Belgian Telecom Providers

By Netvora Tech News

Belgian mobile virtual network enabler Effortel has disclosed that the personal data of approximately 70,000 customers of Belgian virtual telecom providers has been leaked. The affected providers include Carrefour, Neibo, and Undo. Effortel, which acts as an intermediary between telecom companies and virtual providers, has revealed that the breach occurred while it was testing a new system to transmit data to the government's Central Number Database.

The company was in the process of integrating its system with the Central Number Database, and in the course of testing, generated files containing customer data, which unfortunately leaked. A hacker was able to gain access to these files through the support portal between MVNOs and Telfort.

Data Compromised

The compromised data includes names, dates of birth, email addresses, phone numbers, physical addresses, VAT numbers, language preferences, subscription numbers, and technical identification data such as SIM card numbers. Effortel notes that 60-65% of customers verify their identities through online payments, and while payment IDs are stored, these can only be linked to personal data through the payment provider.

Impact

Carrefour, one of the affected providers, had previously announced that the data of 64,000 customers had been leaked. The incident highlights the importance of securing customer data, particularly in light of Belgium's ban on anonymous SIM cards. Telecom providers are required to keep track of who is using which SIM card, as reported by Het Laatste Nieuws.

The incident serves as a reminder of the importance of robust cybersecurity measures to prevent data breaches.
Effortel's testing process, which generated files containing customer data, has been criticized for its lack of security.
The incident is a stark reminder of the need for vigilance in protecting sensitive customer data.

Investigation

The investigation into the incident is ongoing, and Effortel has promised to cooperate fully with authorities. The company has also offered support to affected customers and is working to prevent similar incidents in the future.

The data leak serves as a wake-up call for the tech industry, highlighting the need for robust cybersecurity measures to protect sensitive customer data.