Skip to content

SFR

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2026

    SFR data breach controversy

    Issue disclosure

    SFR confirmed a data breach exposing personal information of some fibre customers, detected by its security teams on July 2, involving an internal tool used to manage and analyse fibre connections. SFR said it disabled the account used to access the tool, blocked and monitored the IP addresses involved, notified the CNIL and filed a complaint with the public prosecutor. Cyberattaque.org reported that a database containing around 2.1 million records was accessed, a figure SFR has not confirmed.

    Company response

    • Ongoing disclosure — SFR

      SFR has also notified France's data protection authority, the CNIL, and said it has filed a complaint with the public prosecutor.
    • Remediation — SFR

      The operator said it immediately took steps to stop the access. It disabled the account used to access the tool, blocked and monitored the IP addresses involved and carried out further security investigations.

    Source excerpt

    • SFR has confirmed a data breach that exposed personal information belonging to some of its fibre customers.
    • The incident was detected by SFR's security teams on July 2 and it involved an internal tool used to manage and analyse fibre connections.
    • SFR has also notified France's data protection authority, the CNIL, and said it has filed a complaint with the public prosecutor.
  2. 2024

    SFR customer-data breach

    On September 3, 2024, SFR experienced unauthorized access to a customer order-management environment. Reported categories of exposed information included names, contact details, order information, IBANs and SIM or device identifiers. The incident was reported to France's data-protection authority and referred to prosecutors.