T-Mobile has issued a cybersecurity incident update to confirm that it has detected unauthorized access to its data. However, the company said it has yet to determine if customers’ information has been breached.
The mobile communications company said in its statement that it has started an investigation on the reported data breach and that it has been coordinating with law enforcement. “We have determined that unauthorized access to some T-Mobile data occurred, however we have not yet determined that there is any personal customer data involved,” the incident report reads.
The company’s confirmation comes after Motherboard reported on Sunday that hackers in an underground forum were claiming to have access to customer data. The sellers were reportedly offering “full customer info” that purportedly affects 100 million T-Mobile USA users. They were asking for 6 bitcoin, which currently converts to more than $270,000.
Hackers further claimed that the leaked data include customers’ names, phone numbers, and addresses. Other highly sensitive information like social security numbers, addresses, International Mobile Equipment Identity (IMEI) numbers that are unique to every phone, and driver license details were said to be part of the breach, per the hackers’ claims.
Flashpoint intelligence analyst Abigail Showman expressed concern about the leaked IMEI numbers, telling Wired that culprits could use it to launch SIM-swap attacks or SIM hijacking similar to what happened to some T-Mobile customers just last February. “This could lead to account takeover concerns since threat actors could gain access to two-factor authentication or one-time passwords tied to other accounts,” Showman explained.
While T-Mobile has yet to officially confirm that there was a data breach of this magnitude, Motherboard said it has seen samples of the for-sale information. The publication added it was able to confirm that the leaked data include “accurate information” of T-Mobile customers.
In the same statement, T-Mobile said it was able to secure the entry point that hackers exploited to access its servers. The hackers appear to have confirmed this as well after the seller reportedly said in the underground forum, “I think they already found out because we lost access to the backdoored servers.” But they also claimed that the data they gathered was already “backed up in multiple places.”
Photo by Mika Baumeister on Unsplash


Defense Contractors Move to Drop Anthropic AI After Trump Administration Ban
Trump Orders Federal Agencies to Halt Use of Anthropic AI Technology
OpenAI Explores Partnership With The Trade Desk to Expand ChatGPT Advertising
US Lawmakers Raise Security Concerns Over Intel Testing ACM Research Chipmaking Tools
Anthropic Refuses Pentagon Request to Remove AI Safeguards Amid Defense Contract Dispute
U.S. Deploys Tomahawks, B-2 Bombers, F-35 Jets and AI Tools in Operation Epic Fury Against Iran
Coupang Reports Q4 Loss After Data Breach, Revenue Misses Estimates
Big Tech Signs White House Pledge to Fund Power for AI Data Centers
OpenAI Explores New Code-Hosting Platform to Reduce Dependence on GitHub
Nvidia CEO Jensen Huang Says $100B OpenAI Investment Unlikely as AI Demand Surges
Broadcom Stock Jumps After Strong Earnings Beat and Bullish AI Revenue Outlook
Federal Judge Blocks Virginia Social Media Age Verification Law Over First Amendment Concerns
AI is already creeping into election campaigns. NZ’s rules aren’t ready
The Pentagon strongarmed AI firms before Iran strikes – in dark news for the future of ‘ethical AI’
Nvidia to Launch New AI Inference Processor to Boost OpenAI Performance
AWS Data Center in UAE Hit by Fire After Objects Strike Facility Amid Regional Tensions 



