T-Mobile has suffered a data breach. According to a company’s spokesperson, 0.2%, or approximately 200,000 of T-Mobile’s mobile customers were affected by an incident where phone numbers, number of lines subscribed to, and some call-related information may have been accessed.
“The data accessed did not include names on the account, physical or email addresses, financial data, credit card information, social security numbers, tax ID, passwords, or PINs,” the official announcement said.
T-Mobile Data Breach: What Happened?
The company’s Cybersecurity team recently ended a malicious, unauthorized access to information related to T-Mobile user accounts. The operator immediately initiated an investigation, where leading cybersecurity forensics experts helped to determine what happened. Federal law enforcement was also informed.
What type of information has been accessed?
CPNI, or customer proprietary network information was accessed, most likely including phone number, number of lines subscribed to on an account, and some call-related information was accessed. Fortunately, “the data accessed did not include names on the account, physical or email addresses, financial data, credit card information, social security numbers, tax ID, passwords, or PINs.”
T-Mobile has apologized for the inconvenience the data breach incident could have caused their customers. The company has also said it takes the security of customer information seriously, and “will continue to work to further enhance security so we can mitigate this type of activity.”
T-Mobile’s 2018 Significant Data Breach
In 2018, the company was involved in a significant data breach affecting the personal information of 2 million of its customers. The affected personal information consisted of name, billing zip code, phone number, email address, account number, and account type. Later, it became known that encrypted passwords were was included in the data that was hacked. However, in the original announcement T-Mobile initially said that no passwords were harvested.