In more T-Mobile news surely to give you déjà, déjà, déjà vu, the company has reportedly fallen victim to its third data breach this year, with over 90GB of employee and customer information stolen. And if you aren’t keeping track, it’s the company’s eighth major breach since 2018…
Update: New information suggests the data breach doesn’t affect T-Mobile itself, but an independent T-Mobile retailer called ConnectivitySource. The data from the leak “is related to an independently owned authorized retailer,” T-Mobile told 9to5Mac. “T-Mobile’s employee data was not exposed.”
ConnectivitySource is one of the company’s largest authorized retailers and operates in 38 states across the US. Around 146,109 audio recordings of customers calling stores were also collected by the hackers, claims vx-underground.
The threat actors posted the stolen databases on the infamous cybercriminal forum BreachForum. They claim that the 90GB of PII information belongs to T-Mobile employees, which includes credentials, partial social security numbers (SSNs), and email addresses, along with the company’s sales and analytics data, support calls with customers and other information.
According to the malware researchers at vx-underground, which first pointed out the breach on Twitter (X), the incident occurred in April 2023.
Why exactly the threat actors waited months before leaking the data unknown.
Unfortunately, data breaches are almost the norm for T-Mobile. This particular one comes shortly after T-Mobile’s second breach of 2023 last March, and off the back of the massive January 2023 incident that exposed the personal information of approximately 37 million customers.
I’d also be remiss if I didn’t mention the reports from earlier this week of customers seeing the personal data of other users when logged into their own accounts.
FTC: We use income earning auto affiliate links. More.
Comments