Vodafone has disclosed an unauthorised access incident affecting the data of a company collaborator, leading to the compromise of personal and banking information of a limited number of customers.
The affected customers were promptly notified via SMS or email, and both Vodafone and the involved parties have taken immediate action to stabilise the situation and implement enhanced security measures. Here’s what you need to know and how to protect yourself if you are one of the affected customers.
Details of the breach
The breach has impacted a select number of Vodafone customers who received a notification via SMS regarding a potential leak of their personal and banking data. The compromised information varies depending on the type of user:
Business accounts
- Company name, CIF (Tax Identification Code), contact number, email address, physical address, and bank account details.
- Authorised personnel: Full name, contact number, and a copy of the ID.
Self-employed individuals (autónomos)
- Full name, ID, contact number, email address, physical address, and bank account details.
Individual customers
- Personal ID details, contact number, email address, bank account information, and the contracted phone number.
- Prepaid customers: Bank accounts remain unaffected.
Immediate actions taken
Vodafone and the relevant entities have stabilised the situation and enacted reinforcement and security measures to mitigate potential damages. The affected customers have been notified, providing specific details regarding the compromised data.
Also read: Netflix subscription scam
Security recommendations for affected customers
If you have received an informative SMS or email from Vodafone regarding the potential exposure of your personal and banking data, take the following precautions:
Official channels
- Access the official website provided in the communication or call the free-phone number 900 851 151 for more information.
Avoid suspicious links
- Do not open any links requesting data that claim to be from your bank. Avoid providing personal information related to your card or bank account.
Change access credentials
- Change passwords for platforms associated with the payment of your phone lines.
Protect passwords and PINs
- Do not share your password or PIN. Vodafone will never request such information through SMS, email, or calls.
Contact your bank
- In case of unauthorised charges, contact your bank immediately. Gather evidence of the fraud to file a report with the police.
Egosurfing
- Verify if additional personal data has been affected by using egosurfing techniques to check if the information has been published online.
Vodafone is actively addressing the data breach, and affected customers are urged to follow the provided recommendations to safeguard their information.
Also read: Beware of fraudulent DHL scam campaign
