Personal information compromised. (Source: Shutterstock)
Security researchers discovered an exposed Elasticsearch server containing up to 1.5 million Freedom Mobile users' personal data, passwordless, and including unencrypted credit card and CVV numbers, expiration dates and verification numbers.
The five million exposed customer data logs belonged to Freedom Mobile, Canada's fourth wireless telecommunications provider. The files, stored in plaintext, also held customer names, email and postal addresses, home and mobile phone numbers, birthdates, IP addresses connected to payment methods, customer types and account numbers. The logs also comprised credit checks filed through Equifax and other companies with details of the application results. A Freedom Mobile spokesperson for the company said the incident affected 15,000 customers.
Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.
Your access to unlimited CUTimes.com content isn’t changing.
Once you are an ALM digital member, you’ll receive:
- Breaking credit union news and analysis, on-site and via our newsletters and custom alerts
- Weekly Shared Accounts podcast featuring exclusive interviews with industry leaders
- Educational webcasts, white papers, and ebooks from industry thought leaders
- Critical coverage of the commercial real estate and financial advisory markets on our other ALM sites, GlobeSt.com and ThinkAdvisor.com
Already have an account? Sign In Now
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
Roy Urrico
Roy W. Urrico specializes in articles about financial technology and services for Credit Union Times, as well as ghostwriting, copywriting, and case studies. Also: writer/editor of a semi-annual newsletter for Association for Financial Technology since 1997 and history projects funded by the U.S Interior Department, National Park Service and Warren County (N.Y.).
