T-Mobile Says an Additional 5.3 Million Customer Accounts Were Compromised in Data Breach

T-Mobile earlier this week shared details on a data breach where hackers gained access to the personal information of close to 50 million current, former, and prospective customers.

tmobilelogo
At the time, T-Mobile said that data from 7.8 million current customers had been compromised, as well as information from 40 million former or potential customers. In an updated statement provided today, T-Mobile says that it has confirmed that data from another 5.3 million postpaid customers was accessed.

Information accessed from these customers included names, addresses, birth dates, phone numbers, IMEIs, and IMSIs. The prior 7.8 million customers also saw their SSN and driver's license information stolen.

T-Mobile says that on top of the previously announced 40 million former or prospective customers that were impacted, another 667,000 accounts of former customers were breached. Hackers were able to obtain names, phone numbers, addresses, and birth dates from these customers. Other former and prospective customers had their SSN and driver's license information leaked.

Hackers were also able to access data files that included phone numbers, IMEI numbers, and IMSI numbers, but that data included no personally identifiable information. T-Mobile says that it does not believe that the data in the stolen files included customer financial information, credit card information, debit, or other payment information.

There were 850,000 T-Mobile postpaid customers impacted with phone numbers and PINs exposed, and T-Mobile has reset the PINs on all of these accounts. T-Mobile now says that up to 52,000 names related to current Metro by T-Mobile accounts may also have been included, but none of the T-Mobile files stolen related to former Sprint prepaid or Boost customers.

The attack was first identified when hackers posted on a forum offering to sell data from 100 million T-Mobile customers. The data for sale included social security numbers, phone numbers, names, physical addresses, IMEI numbers, and driver's license data.

T-Mobile says that it has contacted millions of customers and is offering those impacted two years of identity protection services with McAfee's ID Theft Protection Service. The company also recommends that eligible T-Mobile customers sign up for free scam-blocking protection.

To prevent future attacks, T-Mobile says it has "worked diligently to enhance security across our platforms" and is working with experts to understand both immediate and longer-term next steps.

Top Rated Comments

jz0309 Avatar
9 weeks ago
security is still not taken serious enough in corporate America ...
Score: 30 Votes (Like | Disagree)
Macaholic868 Avatar
9 weeks ago
I work in IT. Trust me when I tell you this. You need to assume somebody somewhere has all of your information so pay for an ID theft service and don’t keep an amount of cash you couldn’t afford to lose in a checking account with a debit card you actively use. Keep it in savings and transfer only what you need in the short run or, better yet, don’t use a debit card at all for online or physical transactions. If you get fraudulent charges on a debit card that money is gone and it can take days or weeks to try and get it back. With a credit card you are not responsible and if they won’t work with you then you can dispute the charges. Don’t let them get your money. ID protection services may seem like an unnecessary monthly fee right up until you get hit and need them. Find a credit card with good cash back or rewards you want to use and then use that card for everything. Check the charges daily. It’s worth it even if it adds 10 minutes to your day and another monthly fee.
Score: 21 Votes (Like | Disagree)
velocityg4 Avatar
9 weeks ago

How this is even possible boggles my mind.
Given the number of breaches since 2018. Maybe the login for their server is.
Username: Admin
Password: Password1!

Obviously they started with password. But had to keep upping the ante with each breach.
Score: 19 Votes (Like | Disagree)
Chambers McMac Avatar
9 weeks ago
You’ve got to luv an ad showing for T-Mobile as I read about T-Mobile very ugly breach. Time to move on from this carrier?? Is it a sign?



Attachment Image
Score: 12 Votes (Like | Disagree)
joshwenke Avatar
9 weeks ago
Keep in mind this is the sixth T-mobile breach (that we know of) in just the last four years. This is horrible.

* In 2018, info belonging to millions of T-Mobile customers was accessed by hackers ('https://www.bleepingcomputer.com/news/security/t-mobile-detects-and-stops-ongoing-security-breach/').
* In 2019, T-Mobile exposed prepaid customers' data ('https://www.bleepingcomputer.com/news/security/t-mobile-discloses-data-breach-impacting-prepaid-customers/').
* In March 2020, hackers gained access to T-Mobile employees' email accounts ('https://www.bleepingcomputer.com/news/security/t-mobile-data-breach-exposes-customer-personal-financial-info/').
* In December 2020, hackers accessed exposed customer proprietary network information (phone numbers, call records) ('https://www.bleepingcomputer.com/news/security/t-mobile-data-breach-exposed-phone-numbers-call-records/').
* In February 2021, threat actors targeted up to 400 customers in SIM swap attacks after gaining access to an internal T-Mobile application ('https://www.bleepingcomputer.com/news/security/t-mobile-discloses-data-breach-after-sim-swapping-attacks/').
Score: 11 Votes (Like | Disagree)
yaxomoxay Avatar
9 weeks ago
How this is even possible boggles my mind.
Score: 11 Votes (Like | Disagree)

Related Stories

tmobilelogo

T-Mobile Data Breach Included Personal Information of Almost 50 Million Customers

Wednesday August 18, 2021 5:41 am PDT by
T-Mobile has issued a statement with further details about a cyberattack that the company confirmed earlier this week, confirming that the data breach included the personal information of almost 50 million current, former, and prospective customers. Late last week, T-Mobile confirmed that a forum post that purported to offer data from more than 100 million people was the result of a company...
tmobilelogo

T-Mobile CEO Apologizes for Data Breach, Shares Info on Future Security Plans

Friday August 27, 2021 1:03 pm PDT by
T-Mobile CEO Mike Sievert today penned a letter to T-Mobile customers apologizing for the recent data breach that impacted more than 50 million current, former, and prospective T-Mobile users. Data that included names, phone numbers, addresses, birth dates, social security numbers, driver's license and ID info, IMEI numbers, and IMSI numbers was stolen and has been offered for sale. "We...
tmobilelogo

T-Mobile's Security is 'Awful' Says Hacker Who Stole Data From 50 Million Customers

Thursday August 26, 2021 12:06 pm PDT by
T-Mobile recently suffered a significant data breach that saw sensitive data from more than 50 million current, prospective, and former customers stolen. John Binns, a 21-year-old American who lives in Turkey, told The Wall Street Journal that he is responsible for the attack. Binns said that he discovered an unprotected router in July after scanning T-Mobile's known internet addresses for...
tmobilelogo

T-Mobile Confirms Data Breach, Unclear If Personal Customer Data Was Accessed

Monday August 16, 2021 12:49 pm PDT by
T-Mobile today confirmed that some of its data had been accessed without authorization in a breach that may impact more than 100 million of its users. Over the weekend, T-Mobile began investigating a forum post that offered data from more than 100 million people. T-Mobile was not mentioned in that post, but the person selling the data told Motherboard that it had come from T-Mobile's...
t mobile walmart

T-Mobile's Smartphones Coming to 2,300 Walmart Locations Across the U.S.

Monday September 13, 2021 1:19 pm PDT by
T-Mobile today announced that its T-Mobile and Metro by T-Mobile smartphones will soon be available in more than 2,300 Walmart locations across the United States, significantly expanding T-Mobile's footprint. T-Mobile devices will be listed on Walmart.com, though customers will need to visit a Walmart store to make a purchase. The rollout follows the availability of T-Mobile devices in Best...
apple tv plus banner

T-Mobile Offering Free Year of Apple TV+ to Select Customers Starting Wednesday

Monday August 23, 2021 6:12 am PDT by
T-Mobile today announced that new and existing Magenta and Magenta MAX customers can receive 12 months of Apple TV+ for free starting this Wednesday, August 25 in the United States. T-Mobile has launched a promotional page with further details. The offer can even be redeemed by users who already pay for Apple TV+. Once you redeem the offer, your paid Apple TV+ subscription will pause and the ...
three mobile uk

Three Becomes Latest UK Mobile Operator to Bring Back EU Roaming Charges

Thursday September 9, 2021 1:41 am PDT by
Three has become the latest UK mobile network to reintroduce EU roaming fees, in another post-Brexit setback for customers traveling abroad. A flat £2 daily charge when roaming within an EU country will apply to customers who are new or upgrading from October 1. The changes will not come into effect until May 23 2022. The operator joins EE and Vodafone who have recently announced the...
apple wallet drivers license feature

Florida Plans to Join These U.S. States That Will Let You Add Your Driver's License to Your iPhone

Thursday October 14, 2021 8:22 am PDT by
Florida plans to make a digital ID app available to residents on the App Store in mid-November, and the state is working with Apple to also make the digital IDs available in the Wallet app on the iPhone and Apple Watch, according to Florida Politics. Last month, Apple revealed the first U.S. states that will be rolling out the ability for residents to add their driver's license or state ID...
Vodafone 2

Vodafone to Bring Back EU Roaming Charges for UK Customers Abroad

Tuesday August 10, 2021 12:53 am PDT by
Vodafone is bringing back roaming charges for U.K. users traveling in Europe, the second mobile operator do so post-Brexit after originally saying they had no plans to re-introduce them. New and upgrading customers on "selected plans" will be charged at least £1 per day to use their mobile phone in EU destinations. The rules will change for new and upgrading customers from Wednesday,...
apple wallet drivers license

Apple Announces First U.S. States That Will Let You Add Your Driver's License to Your iPhone

Wednesday September 1, 2021 6:15 am PDT by
Apple today announced the first U.S. states that will be rolling out the ability for residents to add their driver's license or state ID to the Wallet app on the iPhone and Apple Watch. Arizona and Georgia will be the first states to support the feature, with Connecticut, Iowa, Kentucky, Maryland, Oklahoma, and Utah to follow, according to Apple. Apple said select TSA security checkpoints in ...