Lyca Mobile services impacted by cyberattack

The International mobile virtual network operator Lyca Mobile has acknowledged a recent cyberattack that severely disrupted its services and potentially resulted in a data breach.

The attack is affecting customers and retailers' access to top-ups and impacting national and international calling. Lyca Mobile, with over 16 million customers and operations in 60 countries, is actively investigating the extent of the breach and the potential compromise of personal information.

The incident may have involved ransomware, given the impact described, but Lyca Mobile stated that their records are fully encrypted, providing some assurance to their customers.

On 7th October Lyca Mobile, confirmed that the cyberattack resulting in unauthorized access to customers' personal data (not disclosed). The breach compromised various categories of personal data. While efforts are underway to restore all services, customers are urged to reset their passwords and remain vigilant and report any suspicious activities related to the breach.

Update - What Data Might Be Compromised?

Lyca Mobile elaborated on the kind of data they store:

1. Identification Data: This includes data like names, addresses, date of birth, alternate contact details, and email addresses.
2. Verification Documents: This encompasses proofs of address, passport copies, ID cards, or similar documents presented during the purchase of their services.
3. Online Account Data: For those who set up an online account with Lyca Mobile, there could be an encrypted password associated.
4. Customer Interactions: Some interactions with the customer service team are recorded and stored for up to 60 days.
5. Credit Card Information: Only the last four digits, expiration dates, and encrypted full credit card numbers are stored. They assure that CVV codes are never stored.

While the company has restored mobile telecom services, some operational issues remain unresolved. CEO Mike Newman highlighted the tangible societal impact such cyberattacks can have, emphasizing the urgency of bolstering cybersecurity defenses to protect against these disruptions.