Leak at Altitude Infra

On 22 December 2025, Altitude Infra — one of France's largest independent fiber-optic infrastructure (FttH) operators — was reported to have suffered a data theft after a threat actor put a package of its internal files up for sale on a cybercrime forum. The intrusion was traced to an extranet used to exchange data with the company's operator clients, which was accessed without authorization around the start of December 2025.

The stolen set comprised 52 files across two folders, totalling roughly 5.76 GB, advertised for about $2,000 with an automated sales bot. Rather than a classic customer database, much of the material was sensitive technical documentation describing the physical layout of French fiber networks, alongside end-customer eligibility lists containing address-level personal data.

Exposed data categories included:

• Network infrastructure documentation (GIS maps, optical-cabinet schematics, node identifiers, fiber-routing files)
• ISP partner files and operational/configuration data
• Regional coverage data spanning numerous French departments
• End-customer prospect identities (names, postal addresses, phone numbers, fiber eligibility)
• Support tickets

Altitude Infra serves more than 3 million residential and business locations and works with major ISPs including Orange, Free, Bouygues Telecom and SFR. The company secured the compromised access, reported the incident to France's data-protection authority (CNIL) under the GDPR, notified the national cybersecurity agency (ANSSI), filed a criminal complaint, and worked with its operator clients to assess the impact.