Orange Romania orange.ro Orange Romania data breach: what happened and what to do
In February 2025, Orange Romania was breached and the data was published. About 556,000 email addresses leaked with phone numbers, subscription details and partial card data (type, last 4 digits, expiry, issuing bank).
View all 13,177 breaches- Breach date
- 24 Feb 2025
- Affected
- 556,557
- Data exposed
- Email addresses, Partial credit card data, Phone numbers
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
In February 2025, the Romanian arm of telecommunications company Orange suffered a data breach. According to Have I Been Pwned, the data was subsequently published online. It contained 556,557 email addresses, many of them in the form of a phone number followed by @as1.romtelecom.net.
TechRadar reported that Orange confirmed the incident and said it came from a non-critical application. An extensive number of internal documents was also exposed.
Sources checked: haveibeenpwned.com, techradar.com, consumer.ftc.gov
Last verified against the official page:
What was exposed
The customer data included email addresses, phone numbers and subscription details. It also included partial credit card data: the card type, the last 4 digits, the expiration date and the issuing bank.
What that means for you
A phone number plus subscription details is what a scammer needs to pose as your mobile or internet provider, by text or phone call. Partial card data alone can't be used to buy things, but it makes a fake billing message sound real. Expect smishing (scam texts) that quotes your plan or bank.
What to do
Be cautious with any message about your Orange account or bill, and contact the company through its official app or website instead.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Your phone number and subscription details leaked together, so scam texts may name your plan. Don't click links or call numbers in unexpected messages. Go to the company's site yourself, and report scam messages at reportfraud.ftc.gov.
- 2
Watch your card statements
Only the card type, last 4 digits and expiry leaked, which isn't enough to make a purchase. Still, check statements for charges you don't recognize and tell your card issuer if you see any, as the FTC advises.
- 3
Check your account through the official app
If a message says there's a problem with your Orange subscription, open the official app or site yourself rather than using the link or number in the message.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email or phone number. Serus also alerts you when your details show up in a new one.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the Orange Romania breach?
If you're an Orange Romania customer, possibly. Search your email or phone number on Have I Been Pwned or run a free Serus scan.
What was exposed?
Email addresses, phone numbers, subscription details and partial credit card data (type, last 4 digits, expiry date and issuing bank).
Were passwords exposed?
Have I Been Pwned doesn't list passwords for this breach. Still, change reused passwords if you're unsure.
Did Orange confirm the breach?
Yes. TechRadar reported that Orange confirmed a data security incident at its Romanian division.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
