The MagtiCom Breach Put 3.4 Million Georgian Subscriber Records Online

HEROIC analysts tracked a large-scale data exposure linked to MagtiCom, Georgia's leading telecommunications provider, on January 1, 2025. The dump contained 3,469,031 subscriber records with phone numbers, first names, and last names. Because MagtiCom serves a sizable share of the Georgian mobile market, the leak likely touches a substantial portion of the country's adult population.

Why This MagtiCom Telecom Breach Is Dangerous

Telecom subscriber dumps are among the most abused datasets in the cybercrime economy. A verified pairing of full name to active phone number is the raw material for SIM swap fraud, two-factor interception, and convincing voice phishing that cites real account details. In Georgia, where mobile numbers are integral to bank authentication and government services, the MagtiCom leak directly elevates the risk of account takeover on critical services for millions of citizens.

What Was Exposed in MagtiCom

• 3,469,031 subscriber records
• Active phone numbers tied to real subscribers
• First names and last names matched to each number
• Records sourced from a direct telecom customer database

Why This Matters

Name and number pairs translate almost immediately into fraud. Criminals feed them into SIM swap attacks to hijack banking 2FA codes, into smishing campaigns that impersonate MagtiCom or the customer's bank, and into identity theft operations that use the telecom identifier as a pivot point. For organizations, the leak raises business email compromise risk because attackers can call employees using verified caller IDs that match names already on the target's contact list.

How Database Breaches Work

Telecom database breaches usually stem from compromised staff credentials, insider threats, or vulnerable customer portals that expose internal APIs. Once an attacker reaches the subscriber table, they exfiltrate entire regional datasets in bulk. Telecom data is especially coveted because it is evergreen. Unlike leaked passwords, phone numbers rarely change, and the name-to-number pairings remain useful to fraudsters for many years after the initial theft.

Check If You Are Affected

HEROIC tracks more than 400 billion compromised records across surface web breaches, dark web marketplaces, and telecom leaks. Run a free scan to check whether your phone number or name appeared in the MagtiCom breach and to identify any related datasets that put you at continued risk.