Published on: August 7, 2025
French telecom giant Orange is grappling with service disruptions after a cyberattack struck one of its information systems on July 25. The incident prompted a swift containment effort that impacted business and public sector services, mostly in France.
In its public statement, Orange confirmed, “On Friday, July 25, the Orange Group detected a cyberattack on one of its information systems,” adding that Orange Cyberdefense had moved quickly to isolate affected components and “limit the impact.” As a result, some platforms used by business customers and a few consumer-facing systems were disrupted, with full service restoration expected by July 30.
While the nature of the attack remains undisclosed, Orange said, “There is no evidence to suggest that any internal or customer data has been exfiltrated.” The company also notified authorities and filed an official complaint, though it did not name which agencies were involved.
TechCrunch reported that Orange is “engaging and informing affected customers,” but did not respond to questions about its ability to detect data theft. BleepingComputer noted that “the incident bears resemblance to a series of widespread breaches of telecom providers… linked to China’s Salt Typhoon cyber-espionage group,” although no attribution has been made in this case.
This is not Orange’s first cyber incident in 2025. In February, its Romanian branch confirmed a breach of a non-critical application after a threat actor claimed to have stolen contracts, source code, employee records, and nearly 400,000 email addresses.
Orange serves 294 million customers across 26 countries and reported €40.3 billion in revenue last year. With previous attacks targeting telecom providers like Verizon, AT&T, and Comcast, the sector remains on high alert.
As Orange works to restore full functionality, the company reiterated, “We remain vigilant in this regard,” and urged continued caution despite the lack of confirmed data compromise.