2026 Freedom Mobile — customer PII via subcontractor credentials (Jan)
Data compromised
Names, dates of birth, emails, addresses, phone numbers, account numbers
Technical writeup
Freedom Mobile (Canada) confirmed unauthorized access between January 12–18, 2026 to its customer account management platform using a subcontractor's credentials. Exposed data included names, DOB, emails, addresses, phone numbers, and account numbers; passwords and payment card data were not accessed per disclosure. Public confirmation reported mid-March 2026; total affected count not publicly specified. Prior related incident reported in late 2025.
Root cause
Unauthorized access via third-party/subcontractor credentials