Telefónica says it was hit by systems breach, internal data leaked online

Telefonica
(Image credit: Future) (Image credit: Future)

  • Hackers recently claimed to having breached Telefonica and stealing sensitive information
  • The company confirmed the breach and said it was investigating
  • The crooks broke into an internal ticketing system

Spanish telecommunications giant Telefónica has confirmed suffering a cyberattack, and said it was currently investigating its scope and potential damage.

The news comes after cybercriminals posted a new thread on a dark web forum containing a Jira database allegedly belonging to the company. One of the attackers spoke to BleepingComputer and said that the “internal ticketing system” is an internal Jira development and ticketing server which Telefónica uses to report and resolve internal issues.

The miscreants used compromised employee accounts to steal 2.3GB of documents, tickets, and other information.

The Hellcat connection

Apparently, the company was breached by four cybercriminals, three of which form the Hellcat Ransomware operation. This group emerged in late 2024, and quickly made a name for itself after targeting Schneider Electric and stealing more than 40GB of information.

In a peculiar move, Hellcat demanded a ransom of $125,000 to be paid in "baguettes," a term they later clarified as referring to Monero cryptocurrency, likely using the term "baguettes" to gain media attention.

Telefónica has now confirmed the breach, telling BleepingComputer it was currently looking into the matter.

"We have become aware of an unauthorized access to an internal ticketing system which we use at Telefónica," the company told the publication. "We are currently investigating the extent of the incident and have taken the necessary steps to block any unauthorized access to the system."

Telefónica is a leading Spanish telecommunications company with a global presence, serving approximately 392 million customers across Europe and Latin America. It operates in countries including Spain, Germany, the United Kingdom, Brazil, and several others in Latin America. In the first half of 2024, Telefónica reported revenues of $22.03 billion, with a net income of $1.06 billion, reflecting a 28.9% increase compared to the same period in the previous year.

The company maintains a strong market presence, with mobile market shares ranging from 18.2% in Mexico to nearly 54% in Venezuela as of 2023.

Via BleepingComputer

You might also like

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Read more
An abstract image of digital security.
Orange confirms it suffered breach after hacker leaks company documents
How to prevent cyberattacks
NTT admits hackers accessed details of almost 18,000 corporate customers in cyberattack
ID theft
Hackers claim Orange attack, threaten to leak 1TB of data
Ransomware
Atos now says its systems weren't hit by a ransomware attack after all
A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background.
Major breach hits employee screening firm - 3.3 million affected as hackers steal DISA data
China
Salt Typhoon hackers used this clever technique to attack US networks
Latest in Security
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
An abstract image of digital security.
Fake file converters are stealing info, pushing ransomware, FBI warns
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Coinbase targeted after recent Github attacks
hacker.jpeg
Key trusted Microsoft platform exploited to enable malware, experts warn
IBM office logo
IBM to provide platform for flagship cyber skills programme for girls
Latest in News
Zendesk Relate 2025
Zendesk Relate 2025 - everything you need to know as the event unfolds
Disney Plus logo with popcorn
You can finally tell Disney+ to stop bugging you about that terrible Marvel show you regret starting
Google Gemini AI
Gemini can now see your screen and judge your tabs
Girl wearing Meta Quest 3 headset interacting with a jungle playset
Latest Meta Quest 3 software beta teases a major design overhaul and VR screen sharing – and I need these updates now
Philips Hue
Philips Hue might be working on a video doorbell, and according to a new report, we just got our first look at it
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand