Skip to content
Deepak Gupta markTech Fines

Free and Free Mobilefines & penalties

Iliad group

The French broadband operator Free and mobile operator Free Mobile, both part of the Iliad group. Their CNIL penalties followed a 2024 breach that reached data on 24 million subscriber contracts.

Penalties
2
Total penalties (excl. tax recovery)
≈ $48.7Mexcludes annulled
Largest
$31.3M
Span
2026 to 2026

Every recorded penalty

2 penalties

Free and Free Mobile · Free Mobile · 2026

Free Mobile fined €27M by the CNIL after a 24M-contract breach

Not yet final

The CNIL found that Free Mobile's security was inadequate for the volume and sensitivity of its data, with weak authentication on the VPN used for remote work and ineffective detection of abnormal activity, after an attacker reached its systems in October 2024. It also found that the breach notice sent to subscribers lacked required information, and that Free Mobile kept millions of former subscribers' records for an excessive period.

CNIL · France€27M≈ $31.3M

Free and Free Mobile · Free · 2026

Free fined €15M by the CNIL after a 24M-contract breach

Not yet final

The CNIL found that Free, the broadband operator, did not secure its subscribers' data to a level matching its volume and sensitivity, with weak VPN authentication and ineffective detection of abnormal activity, after an attacker reached the systems of Free and Free Mobile in October 2024. It also found that the breach notice sent to subscribers lacked required information on the consequences and on how to protect themselves.

CNIL · France€15M≈ $17.4M