Freedom Mobile has disclosed a data breach that exposed personal information belonging to a limited number of customers, following unauthorized access to its internal systems in late October.
According to a notice sent to customers, the incident was detected on October 23, 2025, when Freedom Mobile’s security team observed suspicious activity on its customer account management platform.
This platform is used internally to view and manage customer profiles and account details.
The company’s investigation found that a third party gained access by using the account of a subcontractor.
In practical terms, this means an attacker used valid login credentials belonging to an external partner, rather than breaking through technical defenses directly. Once inside, the attacker was able to view specific customer records.
The exposed data includes first and last names, home addresses, dates of birth, phone numbers (home and/or mobile), and Freedom Mobile account numbers.
Freedom Mobile states that payment information, such as credit card or banking details, and account passwords were not accessed. The attack appears limited to personal profile data, not financial data or authentication secrets.
After detecting the intrusion, Freedom Mobile says it blocked the suspicious accounts and associated IP addresses, and implemented additional security controls on the platform.
These steps typically involve tightening access permissions, adding extra monitoring, and reviewing login policies for subcontractors, such as enforcing stronger passwords and multi-factor authentication.
The company reports that there is currently no evidence that the exposed information has been misused.
However, the type of data accessed especially names, addresses, dates of birth, and phone numbers can be valuable for social engineering and phishing attempts.
Attackers may use this information to send convincing fake messages that appear to come from Freedom Mobile or other institutions.
Freedom Mobile is urging customers to stay alert for unexpected emails or text messages that ask for personal or financial information or that direct them to log in via links.
The company emphasizes that it will never ask for credit card numbers, banking information, passwords, or PINs by email or SMS.
Customers are also advised to monitor their mobile accounts and other online services for unusual activity and to avoid clicking on suspicious links or downloading unexpected attachments as the investigation and enhanced monitoring continue.
Find this Story Interesting! Follow us on Google News, LinkedIn and X to Get More Instant Updates
%20(1).webp?fit=1600,900&ssl=1&description=According to a notice sent to customers, the incident was detected on October 23, 2025, when Freedom Mobile’s security team){kind=link}