For a reason still unknown, Free subscribers found themselves with other users’ invoices when downloading their monthly bill. As a result, a lot of personal information such as first name/name, email and postal address or even part of the RIB was revealed.
Update from Wednesday March 6, 2024 at 5:57 p.m.:
At the end of the day, we received a response from Free. According to a spokesperson for the operator, “This bug that occurred last night is resolved. It was fixed quickly (it lasted an hour) and affected very few subscribers in proportion to our subscriber base”.
Original article
What’s going on at Free? For several weeks, worrying anomalies have been occurring one after the other among the internet troublemaker. Remember in February 2024, the operator was the victim of a massive leak of personal data. Indeed, malicious individuals were able to access a large list of names, addresses and telephone numbers of Free customers. The company also sent a burst of alerts by email to warn subscribers of this breach and warn them against possible future phishing campaigns.
And this Tuesday, March 5, 2024, the IT security specialist Only SaxX shared worrying news on X (Twitter). For good reason, since yesterday some Free subscribers have noticed to their great surprise an anomaly when downloading their monthly bill. Indeed, instead of ending up with their bulletin, they were able to open other users’ notes!
Also read: Freebox Ultra – migration remains paying, except in these very specific situations
Free subscribers end up with the bill of other customers
Fatally, these users were able to unwittingly consult personal information of other customers as :
- first and last names
- the email address
- postal address
- the Free identifier
- Part of the RIB
- the detailed invoice as a whole
- the amount to pay
- call log
🚨🔴CYBERALERT🔴 | 🇫🇷Free, users access the invoices of users other than their own!
For almost an hour, many users of #Free complain about having access to other users’ invoices.
When wanting to download your invoice, it is rather the invoice… pic.twitter.com/to5Qfe3XTK
— Only SaxX (@_SaxX_) March 5, 2024
On user complaints have multiplied. “My invoice history shows invoices from March 2024 from people I don’t know… We agree, this is not normal. writes Left Whelk on the social network. “Hello Free! Would it be possible for you to strengthen your security on your customers’ information? No, because I wanted to download my invoice this month and it wasn’t mine… I tested 3 times: 3 invoices from 3 different customers”, explains another startled user.
The vast majority of these affected subscribers tried to contact Free, in vain.. “I am also part of this dysfunction, numerous invoices from unknown customers. Contacted Free by all means at our disposal, but impossible to get them,” writes another subscriber.
As we write these lines, we tried to contact Free also to have an explanation of this phenomenon. We are still waiting for the operator’s response. Of course, we will update this article as we have more information on this bug.