Data Stolen in Eurofiber France Hack

Eurofiber France disclosed that a threat actor compromised its ticket management platform and the ATE customer portal, with the incident occurring on 13 November 2025 and resulting in a data breach. The hackers allegedly exploited an SQL injection bug in the GLPI IT service management platform to exfiltrate data, accessing information such as support tickets, internal messages, configuration files, VPN configurations, credentials, API keys, tokens, SQL backups, source code, screenshots and other internal documents.

The company said the breach affected only Eurofiber France and its subsidiaries, with roughly 10,000 customers impacted and including some government entities, while its Belgium, German and Dutch customers were not affected. Eurofiber noted that sensitive banking details or critical data stored in other systems were not impacted, and that services remained fully operational during the attack.

According to SOCRadar, the attackers also breached the GLPI platform, and a threat actor named ByteToBreach has claimed the attack on an underground forum, stating they obtained password hashes and various secrets. Responding to SecurityWeek’s inquiry, Eurofiber filed a report for extortion and said it had patched the vulnerability and implemented additional security measures.