Freedom Mobile suffered a data breach in January 2026 that saw a third party access customers’ personal information.
The carrier revealed the details of the breach in a notice published on its website on March 18. In the notice, Freedom said it sent an email or text to impacted customers on the 18th.
“We detected unauthorized activity within our customer account management platform that occurred between January 12 and 18, 2026,” Freedom said in the notice. “Our investigation determined that a third party used the credentials of a subcontractor to gain access to the personal information of some of our customers.”
However, Freedom did not disclose how many customers were impacted.
Freedom said it disabled the compromised third-party account and has “taken steps to address the factors that made this situation possible.” The carrier also says it’s monitoring the affected accounts for signs of unusual activity.
While payment information and passwords weren’t accessed, Freedom said the following personal information was:
- First and last name
- Home address
- Email address
- Date of birth
- Phone numbers (home and/or cell)
- Freedom Mobile account number
Freedom says it has no indication that personal information was misused, and encourages customers to be vigilant. The carrier advised taking precautions, including being suspicious of unexpected messages asking for personal information, avoiding clicking on links or downloading attachments from texts and emails, and monitoring accounts for suspicious activity.
Notably, this is the second Freedom data breach in just a few months. In December 2025, Freedom shared a similar notice about unauthorized access to the same customer management platform in October. The October breach also resulted in hackers accessing customers’ personal information.
Further, Freedom suffered a breach in 2019 after a security flaw exposed the data of 15,000 customers.
Freedom isn’t the only Canadian carrier dealing with data breaches. Telus subsidiary Telus Digital suffered a data breach this year where hackers reportedly stole over 1,000TB of data.
