T-Mobile breach exposes personal customer information

mood · Nov 21, 2019

T-Mobile breach exposes personal customer information
November 21, 2019
https://appleinsider.com/articles/19/11/21/t-mobile-breach-exposes-personal-customer-information

T-Mobile on Thursday reported a recent data breach in which potentially sensitive information, including customer names and billing addresses, was leaked to an unidentified attacker or attackers.

Other information potentially fed to hackers includes customer phone numbers and their rate plan and attached feature set, T-Mobile said in a statement posted to its website. No financial information, social security numbers or passwords were divulged in the attack.
A company spokesperson told CNET that a "very small single digit percentage of customers" were impacted by the incident.
Click to expand...

T-Mobile statement

Our Cybersecurity team discovered and shut down malicious, unauthorized access to some information related to your T-Mobile prepaid wireless account. We promptly reported this to authorities. None of your financial data (including credit card information) or social security numbers was involved, and no passwords were compromised.

The data accessed was information associated with your prepaid service account [...]
Click to expand...

mood · Nov 23, 2019

"very small single digit percentage of customers" = 1 million

More than 1 million T-Mobile customers exposed by breach
November 23, 2019
https://techcrunch.com/2019/11/22/more-than-1-million-t-mobile-customers-exposed-by-breach/

In this case, however, it seems that T-Mobile has disclosed the hack in a fairly prompt manner, though it provided very few details. When I asked, a T-Mobile representative indicated that “less than 1.5 percent” of customers were affected, which of the company’s approximately 75 million users adds up to somewhat over a million.
The company reports that “we take the security of your information very seriously,” a canard we’ve asked companies to stop saying in these situations.

They did not answer other questions I asked, such as whether it was on a public-facing or internal website or database, how long the data was exposed and what specifically the company had done to rectify the problem.
The data listed above is not necessarily highly damaging on its own, but it’s the kind of data with which someone might attempt to steal your identity or take over your account.

If you’re a T-Mobile customer, it may be a good idea to change your password there and check up on your account details.
Click to expand...

mood · Mar 5, 2020

T-Mobile Says Security Incident Might Have Exposed Customers’ Data
March 5, 2020
https://www.tripwire.com/state-of-s...y-incident-might-have-exposed-customers-data/

Mobile telecommunications company T-Mobile disclosed a data security incident that might have exposed the account information of some of its customers.

T-Mobile’s Cybersecurity team learned of the incident when it discovered an attack against its email vendor. The team responded by shutting down the attack and launching an investigation into what happened.
This effort revealed that malicious actors had used the attack to access certain T-Mobile employees’ email accounts.

In a notice of data breach published on its website, T-Mobile revealed that it had not discovered evidence of anyone having misused the exposed customer data. Even so, the company went ahead and reported the incident to law enforcement, began notifying customers and urged customers to review their account account information including their PINs/passcodes. It also said that it’s working to provide even stronger account security going forward:
Click to expand...

News of this incident comes several months after T-Mobile revealed that a security incident might have exposed the personal information of some of its customers. In that incident, digital attackers gained access to some prepaid wireless account holders’ information
Click to expand...

mood · Dec 30, 2020

T-Mobile data breach exposed phone numbers, call records
December 30, 2020
https://www.bleepingcomputer.com/ne...ta-breach-exposed-phone-numbers-call-records/

T-Mobile has announced a data breach exposing customers' proprietary network information (CPNI), including phone numbers and call records.
Starting yesterday, T-Mobile began texting customers that a "security incident" exposed their account's information.

According to T-Mobile, its security team recently discovered "malicious, unauthorized access" to their systems. After bringing in a cybersecurity firm to perform an investigation, T-Mobile found that threat actors gained access to the telecommunications information generated by customers, known as CPNI.
The information exposed in this breach includes phone numbers, call records, and the number of lines on an account.

"Customer proprietary network information (CPNI) as defined by the Federal Communications Commission (FCC) rules was accessed. The CPNI accessed may have included phone number, number of lines subscribed to on your account and, in some cases, call-related information collected as part of the normal operation of your wireless service," T-Mobile stated in a data breach notification.
Click to expand...

T-Mobile states that the data breach did not expose account holders' names, physical addresses, email addresses, financial data, credit card information, social security numbers, tax IDs, passwords, or PINs.
Click to expand...

mood · Jan 1, 2021

mood said: ↑

T-Mobile data breach exposed phone numbers, call records December 30, 2020
Click to expand...

In a statement to BleepingComputer, T-Mobile stated that this breach affected a "small number of customers (less than 0.2%)." T-Mobile has approximately 100 million customers, which equates to around 200,000 people affected by this breach.

12/30/20 Update: Added statement from T-Mobile
Click to expand...

T-Mobile rounds out this awful year with another data breach, affecting hundreds of thousands of subscribers
December 31, 2020
https://www.androidpolice.com/2020/...out-this-awful-year-with-another-data-breach/

UPDATE: 2020/12/31 2:43PM PST BY STEPHEN SCHENCK
Scope of breach
Curious why you haven't gotten an alert yet? T-Mobile has provided slightly more detail about just how many users were affected by this breach, giving us a clearer picture of its scope.

The carrier reports that the breach involved a "small number of customers (less than 0.2%)," which may seem quite small until you consider that T-Mobile's got right about 100 million active subscribers in the US. So, if you're not among that 200,000 or so, consider yourself lucky.
Click to expand...

reasonablePrivacy · Jan 1, 2021

Does this breach affect only US customers? What about EU?

Log in or Sign up

T-Mobile breach exposes personal customer information

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

reasonablePrivacy Registered Member

Log in or Sign up

T-Mobile breach exposes personal customer information

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

mood Updates Team

reasonablePrivacy Registered Member

Useful Searches