Free: Stolen customer data is actively exploited by hackers, watch out for your bank account

Phishing attempts by email or SMS targeting Free customers have increased recently. More than five million IBANs have been stolen.

The massive data leak at Free that occurred last October continues to cause damage. Hackers are using the personal and banking information of the operator's customers to lure them into a trap, which could well cost them dearly if they are not vigilant.

On X (Twitter), a user shares a screenshot of an email he received. The message tells him that he will indeed be debited 480 euros, for a service he has, of course, never subscribed to. It is specified that the debit will be made in a few days, and to reinforce the feeling of panic in the target, his full IBAN is provided. The user explains that this email address was only provided Free, and that the leak of its data therefore necessarily comes from the intrusion that the operator suffered several months ago.

Phishing emails and SMS

The person who received this email explains that there has been no request for direct debit for the moment, but that he fears that this will be the case in the future. In the current case, a “Cancel subscription” button redirects to a phishing site, intended to steal even more data, or even recover your credit card details.

Beware of the exploitation of data stolen from @free, we're starting to get some "interesting" emails...

Besides, banks are still unable to change IBANs following a leak... pic.twitter.com/DBtLOmWtT4

— 奇伟 (@xbeaudouin) April 28, 2025

If you see a message like this in your inbox, do not click on any links. If in doubt, contact your bank directly through your mobile app or web platform, but go there manually, without going through a link communicated by email or messaging.

Banks do not offer automatic IBAN changes in the event of a data leak. If your IBAN has been leaked, you can, however, open a new checking account and close the old one to protect yourself. Free customers have reported receiving numerous scams of this type by email or text message for several weeks. UFC-Que Choisir recently highlighted Free's security and contacted the CNIL.