Forest Global Training Partners

Cyber Risks · Krebs on Security

T-Mobile: Breach Exposed SSN/DOB of 40M+ People

Summary: T-Mobile disclosed a breach exposing names, dates of birth, Social Security numbers and driver's license/ID data for more than 40 million current, former or prospective customers who had applied for credit, plus about 7.8 million current postpaid accounts and roughly 850,000 active prepaid customer names, phone numbers and account PINs. The acknowledgment came less than 48 hours after records went up for sale on a cybercrime forum, where hackers claimed a database of 36 million US customers' data going back to the mid-1990s.

Why it matters: The stolen files carry SSNs and driver's license data for tens of millions of credit applicants, and the company is resetting PINs on 850,000 prepaid accounts while urging all postpaid customers to change theirs. Krebs notes that phone numbers have become de facto identity documents, so a port-out or SIM swap against a number tied to password-reset SMS can undo an account even when no password was compromised.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related