SFR Confirms Data Breach Affecting Over 2 Million Customers
Listen to the story
French telecom operator SFR has confirmed that it suffered a cyberattack in July 2026, which may have affected the data of more than two million customers.
The attack targeted personal and technical information belonging to SFR's fibre internet customers. According to the company, hackers may have accessed details such as addresses, email addresses, and phone numbers.
A group calling itself ZeroBytes has claimed responsibility for the breach. This same group has previously claimed attacks on France's tax authority and its Ministry of Education.
SFR has said that both personal data and technical data linked to customer accounts were compromised in the attack. The company has not given further details about how the breach happened.
This event is known as a data breach, meaning that private information was accessed or stolen without the owner's permission. Data breaches at large companies can put customers at risk of fraud or unwanted contact.
SFR is one of the major telecom providers in France, serving millions of customers with mobile and internet services. As a company handling large amounts of personal data, it is required to protect this information under French and European law.
Following the confirmation, SFR is expected to inform affected customers and may face scrutiny from data protection authorities regarding how the breach occurred and how it was handled.
Vocabulary10 words
- cyberattack
- an attack on a computer system
- fibre
- a type of fast internet connection
- hackers
- people who break into computer systems illegally
- claimed responsibility
- said publicly that you did something
- data
- information stored electronically
- data breach
- an event where private information is stolen or leaked
- fraud
- a crime of tricking people for money or gain
- compromised
- made unsafe or exposed
- authorities
- official organizations with power to make decisions
- scrutiny
- close and careful examination
Quiz
Answer key
1. July 2026 2. Fibre internet customers 3. ZeroBytes
Fill-in-the-blank listening
Play the audio again and fill in the missing words as you listen.
French telecom operator SFR has confirmed that it suffered a _____ in July 2026, which may have affected the data of more than two million customers.
The attack targeted personal and technical information belonging to SFR's _____ internet customers.
According to the company, _____ may have accessed details such as addresses, email addresses, and phone numbers.
A group calling itself ZeroBytes has _____ for the breach.
This same group has previously claimed attacks on France's tax authority and its Ministry of Education.
SFR has said that both personal _____ and technical data linked to customer accounts were compromised.
This event is known as a _____, meaning private information was accessed without permission.
Data breaches at large companies can put customers at risk of _____ or unwanted contact.
SFR is required to protect customer information under French and European _____.
SFR may face _____ from data protection authorities regarding how the breach occurred.
Discussion questions
- Why might companies be targeted by hacker groups like ZeroBytes?
- What kinds of risks can customers face after a data breach like this?
- Should companies be legally required to inform customers immediately after a breach? Why or why not?
- What steps can individuals take to protect themselves after learning their data may have been exposed?