French Telecom Giant Orange Reports Cybersecurity Breach

Red Dog Security

31 Jul 2025 — 1 min read

Orange, one of the world’s largest telecommunications providers, has confirmed a cybersecurity breach involving one of its internal systems. The company says the threat has been contained, though the incident caused temporary service disruptions in France.

Key Details

Discovery Date: July 25, 2025
Response: Breached system was isolated by Orange Cyberdefense, the company’s internal cybersecurity division
Impact: Temporary service disruptions for business and consumer platforms in France
Full Resolution Expected: By July 30

Official Statement

“On Friday, July 25, Orange Group identified a cyberattack targeting one of its information systems. Upon immediate alert, and with support from Orange Cyberdefense, our teams fully mobilized to isolate potentially affected services and minimize consequences. However, these containment measures led to temporary disruptions in some business platforms and consumer services, mainly in France.”

No evidence of data theft has been found
Relevant authorities have been notified

Broader Context

While no group has been officially blamed, the breach follows a pattern seen in recent attacks on global telecom providers, including:

AT&T
Verizon
Lumen Technologies
Charter Communications
Consolidated Communications
Windstream

According to assessments by the FBI and CISA, many of these incidents have been linked to "Salt Typhoon", a state-sponsored cyber-espionage group associated with China.

Next Steps

Orange reports it is currently:

Conducting forensic analysis to determine the origin and method of the attack
Implementing enhanced monitoring and detection to prevent further intrusions

Takeaway

This breach underscores the ongoing threat to critical infrastructure, even for Tier-1 telecom providers with mature cybersecurity capabilities. While no customer data appears to have been compromised, the incident serves as another warning that large-scale telecom networks remain high-value targets for advanced threat actors.

The s1ngularity Attack Affected 2,180 GitHub Accounts

Specialists from Wiz have published new details on the recent s1ngularity attack targeting the open-source build system NX. The incident exposed data from 2,180 GitHub accounts and compromised more than 7,200 repositories, making it one of the largest supply chain breaches seen this year. What Is NX? NX

iCloud Calendar Is Being Exploited to Send Phishing Emails from Apple’s Servers

Invitations sent through iCloud Calendar are being weaponized to deliver phishing emails disguised as purchase notifications—sent directly from Apple’s own mail servers. This tactic significantly increases the chances of bypassing spam filters. A Familiar Scam with a New Twist According to Bleeping Computer, a reader recently shared a

Hacked npm Packages Downloaded More Than 2.6 Billion Times Weekly

Researchers are warning of what may be the largest supply chain attack in history. Attackers injected malware into several of the most widely used npm packages—collectively downloaded more than 2.6 billion times each week. The breach was made possible when hackers compromised a maintainer’s account through a

Google May Make AI Mode in Search Available by Default

Google is preparing to give users more control over its AI-powered search experience by allowing “AI mode” to be set as the default—potentially replacing traditional link-based results. What AI Mode Does AI mode is a version of Google Search that uses large language models (LLMs) to generate summaries of