The telecoms giant warned that customers were going to be affected by its response to the attack, however, it did not disclose the incident itself.
In a statement, the company said: “At this stage of the investigation, there is no evidence to suggest that any customer or Orange data has been extracted. We remain vigilant in this regard.”
The attack took place on Friday 25 July, with the group detecting a cyberattack on its information systems, with Orange Cyberdefense teams mobilising and isolating the potential attack to mitigate the impact.
“However, these isolation operations have resulted in the disruption of certain services and management platforms for some of our corporate customers and some consumer services, primarily in France. Our dedicated teams are fully mobilised to inform and support affected customers,” Orange stated.
“Our teams have identified and are implementing solutions that will allow, under heightened vigilance, the gradual reopening of the main impacted services by Wednesday morning [30 July].
It added that a complaint has been filed and the relevant authorities have been alerted.
“At this stae of the investigation, there is no evidence to suggest that any customer or Orange data has been extracted. We remain vigilant in this regard,” it added.
The attack follows Orange confirming earlier this year that it experienced a separate cyber attack in March.
At the time, a member of the HellCat ransomware group, known as Rey, gained access to a “non-critical application” belonging to a local branch in Romania, stealing around 380,000 unique email addresses, source code, invoices, contracts and both customer and employee information, amounting to around 12,000 files.
RELATED STORIES
Orange launches defence & security division
Samsung, Orange France pilots 4G & 5G calls on virtualised RAN





