Other names and email addresses belonged to Yoxo customers, Orange’s subscription service with no contract period, meaning it is difficult to determine if the data is still valid, or not.
The hacker recently started exfiltrating data from the app, and later told BleepingComputer they pulled 380,000 unique email addresses, source code, invoices, contracts, and customer and employee information.
Orange Group has confirmed suffering a cyberattack recently, but has said it is still looking into claims of valuable data was stolen.
"Orange can confirm that our operations in Romania have been the target of a cyberattack," a company representative said.
Some email addresses were used by individuals that worked, or collaborated with, Orange Romania, more than half a decade ago.