T-Mobile said "basic" customer data was taken from around 37 million users

computing

(Image credit: T-Mobile)

T-Mobile has warned millions of its customers that a threat actor used an Application Programming Interface (API) to gain access to some of their sensitive data. 

In a warning published on the company’s website, T-Mobile tried to play down the importance of the incident, saying some “basic customer information (nearly all of which is the type widely available in marketing databases or directories)” was obtained.

The data, however, includes people’s names, billing addresses, email addresses, phone numbers, dates of birth, and account numbers, all valuable information for identity theft (opens in new tab) attacks, phishing, and similar social engineering attacks. 

Millions of victims

Passwords, payment card information, Social Security numbers, government ID numbers, as well as financial account information, remained safe, the company confirmed. It also said its investigation concluded that there was no evidence of a breach in its networks or systems. 

While the warning does not say how many people were affected by the breach, and which account types were compromised, a total of 37 million customers had their data accessed, including both prepaid and postpaid customers. 

The attack was taking place between November 25, 2022, and January 5, 2023. It was on January 6 that T-Mobile finally cut the threat actors’ access.

Read more

> T-Mobile to fork out $350m penalty over infamous data breach
> T-Mobile investigates massive potential data breach
> Here’s our rundown of the best firewalls (opens in new tab)

The company reported the attack to both law enforcement and federal agencies in the United States, whose investigation is now ongoing, it was said. T-Mobile also added that it started notifying customers who might have had their data compromised. 

The German telecommunications giant’s track record for data breaches is far from ideal. The company’s had multiple incidents over the years, including one in 2018, one in 2019, and at least three in 2020. In 2021, it was found that the company paid hundreds of thousands of dollars to not have its sensitive data leaked to the web, which happened anyway, and a year later, in 2022, confirmed being targeted by the Lapsus$ extortion gang. 

    Via: BleepingComputer (opens in new tab)

    Are you a pro? Subscribe to our newsletter

    Sign up to theTechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

    By submitting your information you agree to the Terms & Conditions (opens in new tab) and Privacy Policy (opens in new tab) and are aged 16 or over.

    Sead Fadilpašić

    Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

    TECH NEWS RELATED

    SpaceX requests permission for direct-to-smartphone service

    TAMPA, Fla. — SpaceX could provide “full and continuous” direct-to-smartphone services across much of the globe with less than a third of the 7,500 Gen 2 Starlink satellites approved last week, the company said in a request to add the capability to the broadband constellation. SpaceX filed an application with ...

    View more: SpaceX requests permission for direct-to-smartphone service

    You Can Get Unlimited T-Mobile Home Internet for $25/Month (50% Off)

    T-Mobile T-Mobile has spent the past year expanding its home internet service to more areas across the United States. Now you can try out the 5G-powered home internet for half off the usual price, with a few catches. T-Mobile 5G Home Internet has been priced at $50 per month ...

    View more: You Can Get Unlimited T-Mobile Home Internet for $25/Month (50% Off)

    Dish's Boost Infinite Beta Plan Has Been Launched for $25 a Month

    Dish has released its Boost Infinite postpaid plan, which they claimed has unlimited data, texts, and calls. Users will get 30 GB of data per month but may experience speed throttles beyond that. They may also make calls to 80 countries and send texts to 200 countries. How Can ...

    View more: Dish's Boost Infinite Beta Plan Has Been Launched for $25 a Month

    SpaceX files FCC request to put payloads on satellites for direct-to-cell system with T-Mobile

    SpaceX filed a request with the Federal Communications Commission to put payloads on 2,016 of its satellites for its direct-to-cell system with T-Mobile. In August, SpaceX and T-Mobile announced a partnership to end mobile dead zones by connecting T-Mobile phones with Starlink in late 2023. In the documents shared ...

    View more: SpaceX files FCC request to put payloads on satellites for direct-to-cell system with T-Mobile

    New T-Mobile Home Internet Study Reveals Cable Consumers Moving to FWA, But Why?

    A new T-Mobile Home Internet study revealed that cable users are now moving to FWA (fixed wireless access). (Photo : Photo of John Schnobrich on Unsplash )New T-Mobile Home Internet Study Reveals Cable Consumers Moving to FWA, But Why? The telecommunications company’s latest study shows that the Home Internet product ...

    View more: New T-Mobile Home Internet Study Reveals Cable Consumers Moving to FWA, But Why?

    T-Mobile Tuesdays Returns: Weekly Rewards Available for All Subscribers—What to Expect?

    T-Mobile is bringing back its rewards program for all users, where they may get a chance to win rewards from the telecommunications company, centering on its “T-Mobile Tuesdays” promotion. It entitles all users under the company’s services to participate in this deal, offering prizes and other freebies for all to ...

    View more: T-Mobile Tuesdays Returns: Weekly Rewards Available for All Subscribers—What to Expect?

    T-Mobile’s Black Friday deals: 4 free iPhone 14s on a $100/month unlimited 5G plan

    The iPhone 14 might be a tricky gift to get this holiday season, especially the more expensive Pro models. Not because Apple doesn’t offer meaningful discounts on the hottest smartphones around, but because a new lockdown impacted production in China. Still, carriers like T-Mobile have Black Friday deals in ...

    View more: T-Mobile’s Black Friday deals: 4 free iPhone 14s on a $100/month unlimited 5G plan

    T-Mobile Home Internet — Reliable, Fast and at a Lower Cost Than Other ISPs

    T-Mobile T-Mobile provides some of the fastest 4G LTE and 5G coverage in the United States, and now you can get that same great network for Home Internet. At just $50 per month, T-Mobile offers fast Home Internet at a lower monthly cost than many other ISPs today. And ...

    View more: T-Mobile Home Internet — Reliable, Fast and at a Lower Cost Than Other ISPs

    T-Mobile Samsara Un-carrier On Smart Suitcase Review: A Bright PR Grab

    T-Mobile’s Latest 5G Upgrade Ditches LTE for Good

    Elon Musk Rejects Former T-Mobile CEO's Offer to Run Twitter with Sounding 'No'

    OnePlus Nord N300 5G review: lots of smartphone value for under $250

    T-Mobile 5G Home Internet Expands! Here are the New Cities Included; How to Check Availability and More

    T-Mobile’s New Subscribers Can Get Their First Two Months Free — Here’s How

    T-Mobile Confirms You Can Get Two Months of 5G Internet Almost for Free

    Crypto Wireless Carrier Helium Mobile Will Power Solana’s Saga Smartphone

    T-Mobile’s 'Un-Carrier On' Suitcase Sports Apple AirTags, Wireless Battery Charger

    T-Mobile’s ridiculous suitcase includes a Qi charger and AirTag pocket

    T-Mobile made a $325 suitcase that you may actually want to buy

    Hey T-Mobile, nobody wants your suitcase

    OTHER TECH NEWS

    Top Car News Car News