All of you who had T-Mobile not being hacked in the first month of 2023 lost
T-Mobile says hackers stole data for 37 million customers and that this was discovered on January 5th of 2023. The intrusion was dated to November 25th, 2023 so it went on a good 40 days or so.
The hacker collected names, birth dates, phone numbers from 37 million customer accounts. Data not compromised included billing, SSN, govt ID numbers, passwords, payment information.
It doesn’t look too terrible, but having the names and phone numbers and birth dates out there makes everyone on T-Mobile an increased target.
Womp womp.
This was after the 2021 breach where 77 million accounts, names, SSNs and driver’s license information was leaked and they promised to spend $150m to enhance security.
The current hack looks like it vectored in through an API, but no details I can find today.
[New York Times]
