T-Mobile breach exposes personal customer information

mood · Nov 21, 2019

T-Mobile breach exposes personal customer information
November 21, 2019
https://appleinsider.com/articles/19/11/21/t-mobile-breach-exposes-personal-customer-information

T-Mobile on Thursday reported a recent data breach in which potentially sensitive information, including customer names and billing addresses, was leaked to an unidentified attacker or attackers.

Other information potentially fed to hackers includes customer phone numbers and their rate plan and attached feature set, T-Mobile said in a statement posted to its website. No financial information, social security numbers or passwords were divulged in the attack.
A company spokesperson told CNET that a "very small single digit percentage of customers" were impacted by the incident.
Click to expand...

T-Mobile statement

Our Cybersecurity team discovered and shut down malicious, unauthorized access to some information related to your T-Mobile prepaid wireless account. We promptly reported this to authorities. None of your financial data (including credit card information) or social security numbers was involved, and no passwords were compromised.

The data accessed was information associated with your prepaid service account [...]
Click to expand...

mood · Nov 23, 2019

"very small single digit percentage of customers" = 1 million

More than 1 million T-Mobile customers exposed by breach
November 23, 2019
https://techcrunch.com/2019/11/22/more-than-1-million-t-mobile-customers-exposed-by-breach/

In this case, however, it seems that T-Mobile has disclosed the hack in a fairly prompt manner, though it provided very few details. When I asked, a T-Mobile representative indicated that “less than 1.5 percent” of customers were affected, which of the company’s approximately 75 million users adds up to somewhat over a million.
The company reports that “we take the security of your information very seriously,” a canard we’ve asked companies to stop saying in these situations.

They did not answer other questions I asked, such as whether it was on a public-facing or internal website or database, how long the data was exposed and what specifically the company had done to rectify the problem.
The data listed above is not necessarily highly damaging on its own, but it’s the kind of data with which someone might attempt to steal your identity or take over your account.

If you’re a T-Mobile customer, it may be a good idea to change your password there and check up on your account details.
Click to expand...

mood · Mar 5, 2020

T-Mobile Says Security Incident Might Have Exposed Customers’ Data
March 5, 2020
https://www.tripwire.com/state-of-s...y-incident-might-have-exposed-customers-data/

Mobile telecommunications company T-Mobile disclosed a data security incident that might have exposed the account information of some of its customers.

T-Mobile’s Cybersecurity team learned of the incident when it discovered an attack against its email vendor. The team responded by shutting down the attack and launching an investigation into what happened.
This effort revealed that malicious actors had used the attack to access certain T-Mobile employees’ email accounts.

In a notice of data breach published on its website, T-Mobile revealed that it had not discovered evidence of anyone having misused the exposed customer data. Even so, the company went ahead and reported the incident to law enforcement, began notifying customers and urged customers to review their account account information including their PINs/passcodes. It also said that it’s working to provide even stronger account security going forward:
Click to expand...

News of this incident comes several months after T-Mobile revealed that a security incident might have exposed the personal information of some of its customers. In that incident, digital attackers gained access to some prepaid wireless account holders’ information
Click to expand...

mood · Dec 30, 2020

T-Mobile data breach exposed phone numbers, call records
December 30, 2020
https://www.bleepingcomputer.com/ne...ta-breach-exposed-phone-numbers-call-records/

T-Mobile has announced a data breach exposing customers' proprietary network information (CPNI), including phone numbers and call records.
Starting yesterday, T-Mobile began texting customers that a "security incident" exposed their account's information.

According to T-Mobile, its security team recently discovered "malicious, unauthorized access" to their systems. After bringing in a cybersecurity firm to perform an investigation, T-Mobile found that threat actors gained access to the telecommunications information generated by customers, known as CPNI.
The information exposed in this breach includes phone numbers, call records, and the number of lines on an account.

"Customer proprietary network information (CPNI) as defined by the Federal Communications Commission (FCC) rules was accessed. The CPNI accessed may have included phone number, number of lines subscribed to on your account and, in some cases, call-related information collected as part of the normal operation of your wireless service," T-Mobile stated in a data breach notification.
Click to expand...

T-Mobile states that the data breach did not expose account holders' names, physical addresses, email addresses, financial data, credit card information, social security numbers, tax IDs, passwords, or PINs.
Click to expand...

mood · Jan 1, 2021

mood said: ↑

T-Mobile data breach exposed phone numbers, call records December 30, 2020
Click to expand...

In a statement to BleepingComputer, T-Mobile stated that this breach affected a "small number of customers (less than 0.2%)." T-Mobile has approximately 100 million customers, which equates to around 200,000 people affected by this breach.

12/30/20 Update: Added statement from T-Mobile
Click to expand...

T-Mobile rounds out this awful year with another data breach, affecting hundreds of thousands of subscribers
December 31, 2020
https://www.androidpolice.com/2020/...out-this-awful-year-with-another-data-breach/

UPDATE: 2020/12/31 2:43PM PST BY STEPHEN SCHENCK
Scope of breach
Curious why you haven't gotten an alert yet? T-Mobile has provided slightly more detail about just how many users were affected by this breach, giving us a clearer picture of its scope.

The carrier reports that the breach involved a "small number of customers (less than 0.2%)," which may seem quite small until you consider that T-Mobile's got right about 100 million active subscribers in the US. So, if you're not among that 200,000 or so, consider yourself lucky.
Click to expand...

reasonablePrivacy · Jan 1, 2021

Does this breach affect only US customers? What about EU?

mood · Aug 15, 2021

T-Mobile Investigating Claims of Massive Customer Data Breach
Hackers selling the data are claiming it affects 100 million users.
August 15, 2021
https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million

T-Mobile says it is investigating a forum post claiming to be selling a mountain of personal data. The forum post itself doesn't mention T-Mobile, but the seller told Motherboard they have obtained data related to over 100 million people, and that the data came from T-Mobile servers.

The data includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver licenses information, the seller said. Motherboard has seen samples of the data, and confirmed they contained accurate information on T-Mobile customers.

"T-Mobile USA. Full customer info," the seller told Motherboard in an online chat. The seller said they compromised multiple servers related to T-Mobile.
Click to expand...

On the underground forum the seller is asking for 6 bitcoin, around $270,000, for a subset of the data containing 30 million social security numbers and driver licenses. The seller said they are privately selling the rest of the data at the moment.

"I think they already found out because we lost access to the backdoored servers," the seller said, referring to T-Mobile's potential response to the breach.
Click to expand...

Brummelchen · Aug 15, 2021

thank you, i am customer of them, i may have a an open eye now for questionable messages or payments.

mood · Aug 15, 2021

mood said: ↑

T-Mobile Investigating Claims of Massive Customer Data Breach
Hackers selling the data are claiming it affects 100 million users.
August 15, 2021
https://www.vice.com/en/article/akg8wg/tmobile-investigating-customer-data-breach-100-million
Click to expand...

Hacker claims to steal data of 100 million T-mobile customers
August 15, 2021
https://www.bleepingcomputer.com/ne...steal-data-of-100-million-t-mobile-customers/

A threat actor claims to have hacked T-Mobile's servers and stolen databases containing the personal data of approximately 100 million customers.

While the forum post does not state the origins of the data, the threat actor told BleepingComputer that they took it from T-Mobile in a massive server breach.
The threat actor claims to have hacked into T-Mobile's production, staging, and development servers two weeks ago, including an Oracle database server containing customer data.

"Their entire IMEI history database going back to 2004 was stolen," the hacker told BleepingComputer.
Click to expand...

Cybersecurity intelligence firm Cyble told BleepingComputer yesterday that the threat actor claims to have stolen multiple databases totaling approximately 106GB of data, including T-Mobile's customer relationship management (CRM) database.
Motherboard, who first reported on this breach, said they could verify that data samples provided by the threat actor belonged to T-Mobile customers.

When asked if they attempted to ransom the stolen data to T-Mobile, the threat actors said they never contacted the company and decided to sell it on forums where they already have interested buyers.
Click to expand...

mood · Aug 16, 2021

T-Mobile says hackers accessed user data but won't confirm SSN breach of 100 million customers
August 16, 2021
https://www.zdnet.com/article/t-mob...-confirm-ssn-breach-of-100-million-customers/

T-Mobile is looking into allegations that a hacker stole 106GB of data containing the social security numbers, names, addresses and driver's license information for more than 100 million people.

In a statement to ZDNet, T-Mobile said it is "aware of claims made in an underground forum and have been actively investigating their validity." Teams at T-Mobile have been "working around the clock" to investigate the situation, a spokesperson told ZDNet, adding that they have hired digital forensic experts and contacted law enforcement.

"We have determined that unauthorized access to some T-Mobile data occurred, however we have not yet determined that there is any personal customer data involved. [...]" the spokesperson said.
Click to expand...

T-Mobile has been hacked multiple times over the last few years. In January they announced their fourth data breach in three years after incidents in August 2018, November 2019, and March 2020.
Click to expand...

mood · Aug 17, 2021

T-Mobile data breach: Industry reactions
August 17, 2021
https://www.helpnetsecurity.com/2021/08/17/t-mobile-data-breach-industry-reactions/

T-Mobile is investigating a claim that as many as 100 million accounts may have been compromised in a data breach.
Anurag Kahol, CTO, Bitglass
It’s concerning when it takes an organization months, or even years, to recognize that a misconfigured server has enabled a breach or a leak. In this case with T-Mobile, the details are hazy, and it’s not clear when the data may have been accessed.
Leaving a server publicly accessible is simply unacceptable.
Richard Orange, Vice President of EMEA, Digital Guardian
Is it really worrying that companies such as T-Mobile continue to suffer these data breaches when they stand to face such a significant fine and reputable damage.
Click to expand...

Jack Chapman, VP of Threat Intelligence, Egress
This highlights the need for organizations such as T-Mobile to put in place the right technology to secure their sensitive data and defend their employees and their company from targeted attacks by cybercriminals. It’s time for organizations to take responsibility and ensure they’re keeping their customers’ data out of the hands of cybercriminals.
Sharon Besser, SVP, Guardicore
This is yet another example of how important it is to properly segment internal environments to limit attackers’ ability to access ‘crown jewel’ data.
Click to expand...

mood · Aug 18, 2021

T-Mobile says over 40mn customer records affected in hack
August 18, 2021
https://www.luxtimes.lu/en/business...rds-affected-in-hack-611cda76de135b9236eade59

T-Mobile US Inc. said an investigation confirmed about 7.8 million current users had information stolen along with more than 40 million records from past or prospective customers who’d applied for credit in a cyberattack.

The stolen information included customers’ full names, dates of birth, social security numbers, and IDs such as drivers licenses, the Bellevue, Washington-based company said in a statement on Wednesday. The hack doesn’t appear to have included credit card details or other financial information, it said.
Click to expand...

T-Mobile Hackers Stole Personal Data Of 7.8 Million Customers
https://www.silicon.co.uk/security/cyberwar/t-mobile-hackers-data-7-8-million-customers-412262

The scale of the hacker break-in at US telecoms company T-Mobile has been revealed, with millions of current and former customers impacted.
Click to expand...

T-Mobile: T‑Mobile Shares Additional Information Regarding Ongoing Cyberattack Investigation

mood · Aug 18, 2021

Hack could cost T-Mobile millions, analysts predict
August 18, 2021
https://www.lightreading.com/securi...obile-millions-analysts-predict/d/d-id/771571

T-Mobile US announced that up to 40 million current or prospective customers had their personal information stolen out of the company's computer systems.

T-Mobile said its preliminary analysis of the hack found that 7.8 million current T-Mobile postpaid customers had their data stolen.
The company added that around 850,000 active T-Mobile prepaid customers had some data stolen, including their account PINs.
Click to expand...

The financial analysts at New Street Research speculated that T-Mobile may face millions of dollars in fines due to the hack:

"We don't know what liability, if any, T-Mobile will face for the leak. We are reminded of the Equifax leak, which involved a similar kind of data breach for around 163 million people and resulted in fines for Equifax of up to $700 million," they wrote in a note to investors Wednesday.
"On similar math, T-Mobile's leak of roughly 50 million customers would result in a fine of around $215 million."
Click to expand...

The analysts also pointed out that T-Mobile's shares lost around $5.3 billion in value on the news. The company's stock fell from around $145 per share to $140 per share on initial reports of the hack earlier this week.

"The loss of $5.3 billion in value seems to imply that T-Mobile will have 1-2 million fewer customers as a result of the reputational damage inflicted by the breach," they noted.

Importantly, this is the fifth time in recent years that T-Mobile has reported hacks into its systems.
Click to expand...

mood · Aug 20, 2021

T-Mobile Says Hackers Accessed Data of Another 5.3 Million Subscribers
August 20, 2021
https://www.usnews.com/news/technol...cessed-data-of-another-53-million-subscribers

T-Mobile US Inc said on Friday hackers had accessed data of another 5.3 million wireless customers, including address, date of birth and phone numbers, widening the extent of a breach that affected millions of current, former and prospective customers.

The third-largest U.S. wireless carrier had said earlier this week that personal data of more than 40 million former and prospective customers was stolen along with data from 7.8 million existing -Mobile wireless customers.
Click to expand...

mood · Aug 20, 2021

T-Mobile Faces Class Action Lawsuit Over Massive Data Breach
...the lawsuit also asks a court to ban T-Mobile from storing personal information in the cloud.
August 20, 2021
https://www.vice.com/en/article/xgxppk/tmobile-data-breach-class-action-lawsuit

T-Mobile is facing a class action lawsuit for its most recent data breach, in which hackers stole data on at least 47 million current, former, and prospective customers, including Social Security Numbers, according to a copy of the class action complaint filed in a Washington court.

The move comes after Motherboard broke news of the breach on Sunday. At the time, a hacker was advertising 30 million SSNs from an unnamed source. Motherboard verified the data was sourced from T-Mobile; T-Mobile itself later confirmed the contours of the breach.
Click to expand...

The plaintiffs and class members of the lawsuit say their identities "are now at considerable risk because of Defendant's [T-Mobile's] negligent conduct since the Private Information that T-Mobile collected and maintained is now in the hands of data thieves."

The lawsuit adds that the victims may now face losing time and money dealing with the fallout of the data breach, including buying protective measures or because of attempted fraud and identity theft.
T-Mobile has offered customers free credit monitoring, but the lawsuit describes this move as "inadequate."
Click to expand...

The class action was filed by Morgan & Morgan, Terrell Marshall Law Group, Arnold Law Firm, Mason Lietz & Klinger, and The Consumer Protection Firm.

"Consumers entrust their valuable, personal information to companies with the reasonable expectation that it be kept confidential and secure. T-Mobile, a leading telecommunications company, allegedly failed to fully implement a data security system to protect their customers from cyberattacks. [...]" Morgan & Morgan attorneys John Morgan and John Yanchunis said in an emailed statement.
Click to expand...

mood · Aug 20, 2021

T-Mobile breach climbs to over 50 million people
August 20, 2021
https://www.cyberscoop.com/t-mobile-breach-50-million-accounts/

T-Mobile on Friday announced roughly 6 million additional accounts had data was swiped in a recent hack, bringing the total number of victims of the breach to over approximately 55 million individuals.
The revelations come as lawmakers have ramped up scrutiny of the company.

An additional 5.3 million subscriber accounts had addresses, names, dates of birth, and phone numbers accessed, T-Mobile said.
Click to expand...

The new findings also reveal that phone data, IMEI and IMSIs were also accessed. IMEIs, which are often used for advertising purposes, are a unique fingerprint for a device that cannot be reset.

“This breach is yet another example of why Congress must pass a national privacy and data security law,” Republicans on the House Energy and Commerce Committee, led by ranking member Rep. Cathy McMorris Rodgers of Washington, wrote in a statement.
“We need strong national standards that ensure industries can innovate, strengthen cybersecurity and data privacy, and keep up with the evolving ways bad actors steal personal information.”
Click to expand...

T-Mobile has expressed confidence that the company has shut off the access point the hacker used to get into its servers.

“Our investigation is ongoing and will continue for some time, but at this point, we are confident that we have closed off the access and egress points the bad actor used in the attack,” T-Mobile stated in its most recent announcement.
Click to expand...

mood · Aug 26, 2021

T-Mobile hacker who stole data on 50 million customers: ‘Their security is awful'
August 26, 2021
https://www.livemint.com/technology...s-their-security-is-awful-11629987435463.html

The hacker who is taking responsibility for breaking into T-Mobile US Inc.’s systems said the wireless company’s lax security eased his path into a cache of records with personal details on more than 50 million people and counting.

In messages with the Journal, Mr. Binns said he managed to pierce T-Mobile’s defenses after discovering in July an unprotected router exposed on the internet. He said he had been scanning T-Mobile’s known internet addresses for weak spots using a simple tool available to the public.
The young hacker said he did it to gain attention. “Generating noise was one goal," he wrote. He declined to say whether he had sold any of the stolen data or whether he was paid to breach T-Mobile.
Click to expand...

Mr. Binns said he used that entry point to hack into the cellphone carrier’s data center outside East Wenatchee, Wash., where stored credentials allowed him to access more than 100 servers.

“I was panicking because I had access to something big," he wrote. “Their security is awful."
Click to expand...

mood · Aug 27, 2021

T-Mobile CEO apologizes for data breach, announces security partnership with Mandiant
"On behalf of everyone at Team Magenta, I want to say we are truly sorry."
August 27, 2021
https://www.engadget.com/t-mobile-mandiant-security-partnership-181324617.html?src=rss

T-Mobile says it’s “truly sorry” about the data breach that exposed the personal information of more than 54 million customers. “The last two weeks have been humbling for all of us at T-Mobile as we have worked tirelessly to navigate a malicious cyberattack on our systems,” the carrier said in an update on the situation attributed to CEO Mike Sievert.

“To say we are disappointed and frustrated that this happened is an understatement,” Sievert wrote in the post.
Click to expand...

In T-Mobile’s account of what happened, the individual who hacked the company’s IT systems used “specialized” tools and knowledge of its infrastructure to gain access to its testing environments. "In short, this individual’s intent was to break in and steal data, and they succeeded," said Sievert.

The executive says the company is “fully committed” to improving its security practices as it works to regain the trust of its customers, many of whom had personal information like names, birth dates and social security numbers compromised in the incident.
Click to expand...

Looking to the future, the carrier has signed multi-year partnerships with KPMG and cybersecurity firm Mandiant. According to Sievert, the two will help T-Mobile audit its current security practices and implement systems and policies that will help it prevent future cybersecurity incidents.

“Mandiant and KPMG will work side-by-side with our teams to map out definitive actions that will be designed to protect our customers and others from malicious activity now and into the future,” Sievert wrote.
Click to expand...

xxJackxx · Aug 27, 2021

mood said: ↑

I want to say we are truly sorry.
Click to expand...

Can't read it without thinking of that South Park episode...

mood · Dec 28, 2021

Another T-Mobile cyberattack reportedly exposed customer info and SIMs
Documents say the company has contacted impacted customers
December 28, 2021

T-Mobile has suffered another cyberattack after being rocked by a massive data breach in August. This time around, attackers accessed “a small number of” customers’ accounts, according to documents posted by The T-Mo Report.

According to the report, customers either fell victim to a SIM swapping attack (which could allow someone to bypass SMS-powered two-factor authentication), had personal plan information exposed, or both. The document shows that the customer proprietary network information that was viewed could’ve included customers’ billing account name, phone and account number, and info about their plan, including how many lines were attached to their account.
Click to expand...

T-Mobile is taking immediate steps to help protect all individuals who may be at risk from this cyberattack. If you have any questions, send us a DM and we can discuss steps to increase your account security. ^KenStone
— T-Mobile Help (@TMobileHelp) December 28, 2021
T-Mobile’s support account has seemingly confirmed that there was a breach, responding to people on Twitter to say that it’s taking “immediate action” to help individuals who were put at risk by the attack
Click to expand...

zapjb · Dec 28, 2021

Some know what I'm about to write. I blame TM more than the hackers.

wat0114 · Dec 28, 2021

zapjb said: ↑

I blame TM more than the hackers.
Click to expand...

Typically, a bad actor is able to convince their victim’s cell phone carrier to transfer service to a different device, which the victim doesn’t have access to, but the bad actor does.
Click to expand...

https://www.theverge.com/2021/9/30/22702544/fcc-rules-sim-swapping-port-out-fraud-cell-phone-carrier

Log in or Sign up

T-Mobile breach exposes personal customer information

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

reasonablePrivacy Registered Member

mood Updates Team

Brummelchen Registered Member

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

xxJackxx Registered Member

mood Updates Team

zapjb Registered Member

wat0114 Registered Member