T-Mobile Data Breach: 47 Million Customers Affected

T-Mobile Data Breach Impacts Millions of Customers

T-Mobile has officially acknowledged a significant data breach impacting a large number of its subscribers, both present and past. This confirmation follows initial reports of a cybersecurity incident over the weekend.

Scope of the Breach

According to a statement released by T-Mobile, which serves over 100 million customers, an initial assessment indicates that the personal information of 7.8 million current postpaid customers was accessed during the breach.

The compromised data includes customer names, dates of birth, Social Security numbers, and driver’s license details for a portion of both current and former postpaid customers, as well as prospective T-Mobile users.

Records of Former and Prospective Customers

Furthermore, the company revealed that records pertaining to 40 million former and prospective customers were also taken. However, T-Mobile clarified that sensitive financial data, such as phone numbers, account numbers, PINs, passwords, and financial information, remained uncompromised.

Compromised Account PINs

Approximately 850,000 active T-Mobile customer accounts were affected, with names, phone numbers, and account PINs being exposed. T-Mobile has already taken steps to reset these compromised PINs.

As a precautionary measure, T-Mobile is advising all postpaid customers to proactively change their account PINs. This action will help protect against potential SIM-swapping attacks.

Initial Reports and Seller Claims

Reports surfaced over the weekend, as detailed by Vice, indicating that T-Mobile was investigating a potential hack. A seller on a known criminal forum claimed possession of millions of customer records.

The seller asserted to have obtained 100 million records containing customer account names, phone numbers, and the IMEI numbers associated with devices on those accounts.

Potential for Further Impact

T-Mobile cautioned that the full extent of the breach may not yet be known. The company confirmed unauthorized access to some information from inactive prepaid accounts through prepaid billing files, though the specific details were not disclosed, aside from confirming it did not involve financial information.

Recurring Security Incidents

This incident marks the fifth time T-Mobile has experienced a data breach in recent years. Previous incidents occurred as recently as January, with other breaches dating back to 2018.