Free SAS Rotten Score Breakdown
Corporate Misconduct
30.0ptsRotten to the core
Avg Rating: 5.00Ratings: 1Severity Score: 6.00Evidence Count: 1Contribution: 30.0 pts
Misconduct: low 0 · medium 0 · high 1
Remediation: low 0 · medium 0 · high 0ⓘ cap: 25%
CNIL fined Free SAS €15 million for security failures linked to a major 2024 data breach
On 13 January 2026, France's data-protection authority CNIL fined Free SAS €15 million after finding GDPR security and retention violations associated with an October 2024 cyberattack. CNIL reported that information concerning 24 million mobile and fixed-line contracts was exfiltrated across Free SAS and the separately sanctioned Free Mobile entity, including bank details for some contracts. This record attributes only Free SAS's €15 million sanction; it does not attribute Free Mobile's separate €27 million fine to Free SAS. Primary source: https://www.cnil.fr/fr/sanction-free-2026
Human Rights & Exploitation
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Fraud & Corruption
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Deceptive Practices
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Environmental Harm
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Sustainability Deception
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Workplace Misconduct
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts
Financial Misconduct
0.0ptsNo documented evidence
Avg Rating: —Ratings: 0Severity Score: 0.00Evidence Count: 0Contribution: 0.0 pts