Orange Senegal customers targeted by sophisticated invoice scams raising data security concerns
Orange customers in Senegal are increasingly targeted by sophisticated fake invoice scams, where fraudsters possess precise personal details like names, subscription status, and billing information. These scammers contact individuals from numbers belonging to other operators, posing as representatives demanding payment for alleged unpaid bills. The accuracy of the information held by the fraudsters has raised serious questions about how they obtain such sensitive data. While there are no accusations against Sonatel-Orange, and no current evidence points to an internal leak or employee involvement, the lack of proof should not deter an investigation. Potential avenues for investigation include data compromise or leaks, unauthorized access to customer files, misuse of information, vulnerabilities with service providers or subcontractors, data cross-referencing from various sources, or sophisticated social engineering techniques. Sonatel-Orange is urged to enhance transparency regarding data protection mechanisms and communicate procedures for detecting and preventing fraudulent access to personal information. The Commission for the Protection of Personal Data CDP is called upon to assess data protection mechanisms, investigate reports, and identify any shortcomings or vulnerabilities. The Minister of Interior is also urged to involve services specializing in cybercrime to understand how these scam networks acquire information to target victims, identify perpetrators, and trace
