Brit telco Brsk confirms breach as bidding begins for 230K+ customer records

British telco Brsk is investigating claims that it was attacked by cybercriminals who made off with more than 230,000 files.

An advert posted to a cybercrime forum last week claimed to list 230,105 records stolen from the telco, with interested parties invited to bid for access to the data via Telegram.

According to the advert, the stolen data includes customers’ full names, email and home addresses, installation details, location data, phone numbers, and indicators of whether they are considered a vulnerable person.

The Register asked Brsk to confirm the veracity of the advert, but it did not respond.

However, a company statement issued to ISP Review confirmed a database breach, with affected customers being offered fraud protection services.

A spokesperson said: “Brsk is investigating an incident involving unauthorized access to one of our customer database systems. We have established that the information involved is limited to basic customer contact information. No financial information, passwords, or account login credentials were affected. At this stage, there is no evidence to suggest that any of the information has been misused.

“We understand that incidents of this nature can cause concern, and we are treating this matter with the highest level of seriousness. We have informed affected customers, and as an additional precaution, we are offering them 12 months of free personal, financial, and web-monitoring services provided by Experian. We have also engaged specialist security partners to assist with our investigation. The ICO, the police, and relevant regulatory authorities have all been informed.”

In an email to customers, the telco added that the attack had no impact on its core network and operational infrastructure, and that its broadband services were unaffected. It made no comment on the criminals’ claims regarding the vulnerable status of each customer.

Launched in 2020, Brsk merged with Netomnia in 2024, and together they form one of the UK’s largest alternative networks, second only to CityFibre.

Their combined full-fiber services are available at 1.5 million premises across the country, and they have more than 140,000 customers registered.

Brsk is the latest British telco to experience a cybersecurity hiccup this year, joining the likes of Colt and ICUK, which battled ransomware and DDoS attacks respectively. ®

READ MORE HERE