T-Mobile has suffered another cyberattack after being rocked by a massive data breach in August.
This time around, attackers accessed “a small number of” customers’ accounts, according to documents posted by The T-Mo Report.
According to the report, customers either fell victim to a SIM swapping attack (which could allow someone to bypass SMS-powered two-factor authentication), had personal plan information exposed, or both. The document shows that the customer proprietary network information that was viewed could’ve included customers’ billing account name, phone and account number, and info about their plan, including how many lines were attached to their account.
T-Mobile is taking immediate steps to help protect all individuals who may be at risk from this cyberattack. If you have any questions, send us a DM and we can discuss steps to increase your account security. ^KenStone
— T-Mobile Help (@TMobileHelp) December 28, 2021
This summer, the carrier confirmed that a data breach exposed almost 50 million customers’ data, with the attacker accessing social security numbers, names, and dates of birth. (A person who claimed to be the hacker went on to call the company’s security practices “awful.”) The information reportedly exposed in December’s breach is less sensitive (and the documents say the customers who had their SIMs swapped have regained access), and is likely not as large in scope. We weren’t able to find widespread reports from customers that said they’d received notification letters.
T-Mobile’s support account has seemingly confirmed that there was a breach, responding to people on Twitter to say that it’s taking “immediate action” to help individuals who were put at risk by the attack.
Is it about time YOU protected yourself?
T-Mobile suffers a data breach, again
According to a new report, T-Mobile has undergone a small-scale data breach days before the year 2021 ends. The news comes a few months after the company suffered a large-scale data breach in August 2021. The new data breach affected a small number of users who were allegedly a target of a SIM swapping attack.
According to the report, many T-Mobile customers received the “unauthorized activity” notification from the mobile carrier. “That activity was either the viewing of customer proprietary network information (CPNI), an active SIM swap by a malicious actor, or both,” explains the report from The T-Mo Report. In simple terms, customers who were the victim of the breach were a target of a SIM swapping attack or had their personal information exposed, or both.