SFR Cyberattack in France: Data of 2.1 Million Fibre and RED Customers Potentially Exposed

SFR has announced a cyberattack that resulted in unauthorized access to personal information belonging to Fibre customers of SFR and RED by SFR in France. More than 2.1 million data records may have been affected.

The telecommunications operator reportedly detected the intrusion on July 2, 2026, in an internal system used to analyze and manage fibre-network connections. Affected customers were notified approximately six weeks after the incident was discovered.

More Than Two Million Records Claimed

The attackers claim they extracted 2,104,093 data records before SFR detected and blocked their access.

That figure represents individual records and does not confirm that 2.1 million separate customers were affected. The exact number of customers and the full scope of the breach remain under investigation.

What Information Was Exposed?

The potentially compromised information includes customers’ names, postal addresses, email addresses, telephone numbers and customer identification numbers.

Information connected to fibre subscriptions and equipment may also have been accessed, including plan details, line status, connection information and certain technical identifiers.

SFR said passwords and banking information were not compromised in the attack.

SFR Secures System and Notifies French Regulator

The operator said it blocked the unauthorized access and strengthened security measures around the affected system. France’s data-protection authority, the CNIL, was also notified.

SFR and RED by SFR customers should remain alert for emails, text messages and telephone calls claiming to come from the operator.

The exposed information could be used to create convincing phishing messages or allow scammers to impersonate SFR representatives. Customers should never disclose passwords, banking details or security codes received by text message following an unsolicited call.