Free
A monthly contract starts with a credit check, and the check itself becomes a record at the credit agency. The network logs your approximate location with every call, text and data session. Much of the file is kept for years after you leave, tied to the window for bringing a legal claim.
Reported incidents
Fined 42 million euros after 24 million subscriber contracts were exposed
2026-01-14Affected Subscriber systems (Free and Free Mobile)
France's regulator, the CNIL, fined Free Mobile 27 million euros and Free 15 million euros in decisions of 13 January 2026, published the next day. In October 2024 an attacker got into the companies' systems and reached personal data tied to 24 million subscriber contracts, including IBANs for people who were customers of both. The CNIL found weak authentication on the VPN used for remote access, anomaly detection that did not work, and breach emails that did not tell subscribers enough. It found Free Mobile kept former subscribers' data longer than justified, and ordered security fixes within three months and a purge within six.
People affected typically ask Free to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.