Saturday, February 22, 2025
HomeData BreachT-Mobile Hacked - Hackers Accessed Employee's Emails and Users Sensitive Data

T-Mobile Hacked – Hackers Accessed Employee’s Emails and Users Sensitive Data

Published on

SIEM as a Service

Follow Us on Google News

US-based telecom giant T-Mobile has undergone yet another data breach this time, revealing personal account data of both its employees and customers.

We have previously reported a T-mobile data breach in last year and this current breach notification posted on their website, T-Mobile persists on to state that its cybersecurity team newly discovered a sophisticated cyber-attack upon the email accounts of some of its employees. 

Thus, in-service had appeared in the unauthorized access to sensitive information, including details of its customers and employees.

Therefore, “they want you to know about a sophisticated attack that they newly recognized and immediately shut down. Well, it may have influenced some of your account information,” thus, the company has announced that there was an attack by email that let in some ill-disposed players.

What Happened?

Now, the main thing is to know what exactly happened. Well, as we have mentioned above that their Cybersecurity team newly identified and shut down an ill-disposed attack against their email merchant that led to the illegal entrance to some T‑Mobile employee email accounts.

Out of that, some of the accounts contained information for T‑Mobile customers and employees.

Soon, an investigation was initiated, with support from preceding cybersecurity forensics specialists, to ascertain what happened and what information was moved. Not only this, they directly informed this matter to federal law enforcement and are actively assisting their investigation. Thus, T‑Mobile is in the process of notifying customers.

Though the telecom company did not reveal how the violation happened, when it occurred, and specifically how many workers and users did affect, it did verify that the dripped information on its users doesn’t include financial information like credit card and Social Security numbers.

What Information Involved?

As we said earlier that the company did not reveal exact information, but there are some common that are revealed by them.

Thus, the personal information obtained could add names and addresses, Social Security numbers, financial account information, and government identification numbers, as well as phone numbers, billing and account information, and rate plans and features as well.

Thus, the exposed data of an undisclosed number of concerned users include their:-   

  • Names
  • Phone Numbers
  • Account Numbers
  • Rate plans and features
  • Billing information

Well, the company stated that “they regret that this conflict happened. Hence, they consider the security of your information very sincere. While they have several safeguards in position to guard customer information against unauthorized access, they are also working on further simply to improve the security so that they can stay advanced and guard against this type of activity”.

So, what do you think about this? Simply share all your views and thoughts in the comment section below. And if you liked this post, then simply do not forget to share this post with your friends, family, and on your social profiles.

Follow us on TwitterLinkedinFacebook for Daily cyber security & hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer...

Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing...

NSA Allegedly Hacked Northwestern Polytechnical University, China Claims

Chinese cybersecurity entities have accused the U.S. National Security Agency (NSA) of orchestrating a...

ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials

The ACRStealer malware, an infostealer disguised as illegal software such as cracks and keygens,...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Raymond IT Systems Hit by Cyber Attack, Authorities Investigating

Textile and apparel conglomerate Raymond Limited confirmed a cybersecurity breach affecting portions of its...

Zacks Investment Data Breach Exposes 12 Million Emails and Phone Numbers

A cybersecurity incident at Zacks Investment Research has exposed sensitive data belonging to 12...

Indian Post Office Portal Leak Exposes Thousands of KYC Records

The Indian Post Office portal recently exposed the sensitive Know Your Customer (KYC) data...