Free SAS
- Aliases / services
- Freebox / Free 固定回線 / Free SAS
- Official website
- https://www.free.fr/freebox/
Sources identifying the operating company
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Freebox subscriber information
- Response status
- Not listed
- Response information checked
- 2026-10-30
Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30
The October 2024 intrusion affected Free and Free Mobile subscriber data. The FAQ lists info@freetelecom.fr for Freebox notices. CNIL confirmed IBAN exposure for customers holding both subscriptions.
Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.
What users should do
Check your notification. Never share banking details or security codes; verify suspicious messages by directly opening subscribe.free.fr/login/.
Official service URL
Source URLs
- Cyberattack: checking whether you are affectedhttps://assistance.free.fr/articles/1611Service and operation documentation
- CNIL incident and controller findings, 14 January 2026https://www.cnil.fr/en/sanction-free-2026Service and operation documentation
- Free suspicious-message guidancehttps://assistance.free.fr/articles/983Service and operation documentation
Related official sources
- Legal operatorOfficial information directoryFree SAS, RCS Paris 421938861, operates fixed-line Freebox separately from Free Mobile SAS.
- Cyberattack: checking whether you are affectedOfficial information directoryVerifies incident scope, disclosures and customer guidance.
- CNIL incident and controller findings, 14 January 2026Official information directoryConfirms the October 2024 incident and each company’s role as controller for its own subscribers.
- Free suspicious-message guidanceOfficial information directoryOfficial subscriber login routes and credential protection.
Comments