Freedom Mobile discloses second breach tied to a subcontractor's credentials
Freedom Mobile notified customers on March 18 that a third party used a subcontractor's credentials to access personal information in its customer account management platform between Jan. 12 and 18, 2026. It is the carrier's second such breach in a matter of months.
The repeat incident points to a persistent weak spot: outside contractors whose accounts can reach large volumes of customer records. Attackers who obtain those logins can pull data without breaking into the carrier's core network at all.
What happened
In a privacy notice, Freedom said the information accessed includes customers' first and last names, home addresses, email addresses, dates of birth, home or mobile phone numbers and Freedom Mobile account numbers. It said payment information and passwords were not affected and that it has no indication the data has been misused.
The company said it disabled the compromised third-party account, is reviewing its processes and controls for third-party access and is monitoring affected accounts for unusual activity. Affected customers were contacted by email or text on March 18, MobileSyrup reported.
In December 2025, Freedom disclosed that an intruder had used a subcontractor's account to reach the same platform in October 2025. Freedom, owned by Quebecor's Videotron, is one of Canada's largest wireless carriers.
What we don't know yet
Freedom has not said how many customers were affected in either incident, whether the same subcontractor was involved both times or who was responsible.
What to do
- Treat unexpected messages that ask for personal information, or send you to a site to enter it, as suspect. Freedom says it will never ask for card numbers, banking details, passwords or PINs by email or text.
- Do not click links or open attachments in unsolicited texts and emails.
- Set an account PIN with your carrier and check your account regularly for changes you did not make.
- Learn about common scams through the Canadian Anti-Fraud Centre.