The Huge Blow Orange Takes: the Million-dollar Fine They Didn't Expect

Orange has received a severe blow after learning that it has been fined with a million-euro penalty of 1.2 million euros. The Spanish Data Protection Agency (AEPD) has decided to impose this fine on the operator. The reason was a case of SIM swapping, in which the company failed to take the necessary measures to protect the information of one of its customers.

Despite Orange's efforts to shield its systems against this type of crime, cases of SIM swapping continue to occur. Increasingly frequently.

SIM swapping is a crime in which criminals manage to impersonate the legitimate owner of a phone line. They succeed in duplicating the customer's SIM card.

Once they have access to the new SIM, they can intercept messages and authorizations caused on the mobile. This allows them to access bank accounts, make transfers, and commit fraud.

This type of crime remains a threat to many users. Despite the efforts by operators to ensure the security of their processes.

Orange Didn't Remedy

In the case of Orange, the criminals managed through SIM swapping to authorize a transfer of 9,000 euros from a customer's account. The most concerning aspect is that this action was carried out with the complicity of two employees of an Orange store in Madrid. The workers, allegedly recruited by a criminal network, helped the criminals carry out the theft, reports Banda Ancha.

This case has caused great concern not only because of the amount of money stolen. But also due to the internal involvement of the company's own employees. Although Orange's distributor filed a criminal complaint against the workers involved, the AEPD considered that the operator has a responsibility.

According to the agency, Orange did not implement the necessary control measures to prevent employees from accessing customers' confidential information. This facilitated the SIM swapping.

The AEPD has indicated that the company must strengthen its internal security measures. Mainly to limit and control employees' access to users' sensitive data. This fine highlights the importance of operators taking responsibility for the security of their customers' information and taking stricter measures.

Orange Isn't the Only Affected Operator

Orange isn't the only operator facing these problems. But this case has been especially serious due to the internal involvement and the high value of the theft. The 1.2 million euro penalty should serve as a warning to all telecommunications companies about the need to strengthen their security protocols.

With this fine, the AEPD aims to send a clear message. Companies must be responsible for protecting their customers' data and can't skimp on security measures. Especially when there is a risk that their employees may be manipulated to collaborate in such serious crimes.

Undoubtedly, this setback represents an important precedent in the fight against SIM swapping and other mobile phone-related frauds.