Skip to content
Large Data Breach Exposes 125 Million SMS Messages Across Europe

Large Data Breach Exposes 125 Million SMS Messages Across Europe

First seen 14 Nov 2026, 07:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 07:27 UTC
  • •Over 125 million SMS messages exposed from CSCTelecom's database.
  • •Sensitive data includes authentication codes and personal information from banks and airlines.
  • •The breach affects organizations in Latvia, Lithuania, and Estonia, posing significant security risks.

A significant data breach involving CSCTelecom has exposed over 125 million SMS messages, affecting banks, airlines, and healthcare providers in the Baltic states. Discovered on September 28, 2026, the publicly accessible ClickHouse database contained sensitive information, including authentication codes, temporary passwords, and personal details. The records span from October 2022 to September 2026, with the database still receiving updates in real time. Major organizations impacted include Swedbank, SEB, and airBaltic, with messages revealing transaction details and personal identifiers. The breach poses a risk of account takeovers and targeted phishing attacks due to the nature of the exposed data. As of now, CSCTelecom has not provided a public statement regarding the breach. The incident highlights vulnerabilities in third-party services that can compromise multiple organizations simultaneously.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 16h ago How this analysis works

Timeline

2026-09-28
Database discovered exposed
Researchers found a publicly accessible ClickHouse database belonging to CSCTelecom, containing millions of SMS messages.
Cybernews
2026-11-11
Cybernews article published
Cybernews reported on the extensive data breach and its implications for affected organizations.
Cybernews
2026-11-14
Escudodigital article published
Escudodigital provided further details on the breach, confirming the exposure of sensitive information from multiple sectors.
Escudodigital

More articles in this cluster (2)

Following this threat?

Track airBaltic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (21)

1 / 4

Common questions

Which organizations are affected?
The breach affects major banks like Swedbank and SEB, airlines like airBaltic, and various healthcare and retail organizations.
What types of data were exposed?
The exposed data includes SMS messages containing authentication codes, temporary passwords, transaction details, and personal information.
What should organizations do in response?
Organizations should assess their exposure, monitor for unusual account activity, and consider implementing additional security measures.