Skip to content
Cyber Breaches
Search
Data breachResolved

Tangerine data breach (2024)

In February 2024, the Australian Telco Tangerine suffered a data breach that exposed over 200k customer records. Attributed to a legacy customer database, the data included physical and email addresses, names, phone numbers and dates of birth.

Victim
Tangerine
records
243.5K
SectorTelecom
CountryAustralia

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2024-02-18, Tangerine was affected by a data breach. Approximately 243,462 accounts were exposed. In February 2024, the Australian Telco Tangerine suffered a data breach that exposed over 200k customer records. Attributed to a legacy customer database, the data included physical and email addresses, names, phone numbers and dates of birth.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#Tangerine
  2. tangerinetelecom.com.auhttps://tangerinetelecom.com.au

Related incidents

Data breachOngoing

Data leak at SFR

On 24 November 2024, a threat actor advertised a leak of personal data on 3.6 million customers of French telecom operator SFR — names, postal and email addresses, dates of birth and phone numbers — plus 150,000 IBANs offered for separate sale on the dark web.

Victim
SFR
Records
3.6M
Data breachContained

Leak at Free

In late October 2024, French ISP Free (Iliad group) disclosed a breach after attackers accessed an internal management tool, exposing subscriber identity and contact data plus around 5.1 million IBANs; the stolen data was later auctioned and sold online.

Victim
Free
Records
5.2M
Data breachResolved

Finsure data breach (2024)

In October 2024, almost 300k unique email addresses from Australian mortgage broking group Finsure were obtained from the ActivePipe real estate marketing platform. The impacted data also included names, phone numbers and physical addresses.

Victim
Finsure
Records
296.1K
Data breachResolved

digiDirect data breach (2024)

In September 2024, a data breach sourced from the Australian retailer digiDirect was published to a popular hacking forum. The breach exposed over 300k rows of data including email and physical address, name, phone number and date of birth.

Victim
digiDirect
Records
304.3K