Cyber Risks · Krebs on Security

T-Mobile Investigating Claims of Massive Data Breach

Summary: T-Mobile said it is investigating an intrusion after hackers claimed to be selling data on 100 million T-Mobile USA customers, including names, Social Security numbers, addresses, dates of birth, phone numbers, plaintext security PINs and device identifiers. The hackers told Krebs they reached two T-Mobile customer data centers through an opening in the wireless data network and dumped more than 100 gigabytes of databases, one of which they say holds records on 36 million customers going back to the mid-1990s.

What you should know: The claimed haul includes plaintext security PINs and IMSI/IMEI pairs for 36 million customers, and the sellers offered to look up any T-Mobile number on request to prove the data was real. T-Mobile's own statement said it could not yet confirm the number of records affected, leaving the scale of exposure unresolved while the data was already being offered for sale.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related