Tuesday, May 28, 2024

T-Mobile Hacked – Hackers Accessed Employee’s Emails and Users Sensitive Data

US-based telecom giant T-Mobile has undergone yet another data breach this time, revealing personal account data of both its employees and customers.

We have previously reported a T-mobile data breach in last year and this current breach notification posted on their website, T-Mobile persists on to state that its cybersecurity team newly discovered a sophisticated cyber-attack upon the email accounts of some of its employees. 

Thus, in-service had appeared in the unauthorized access to sensitive information, including details of its customers and employees.

Therefore, “they want you to know about a sophisticated attack that they newly recognized and immediately shut down. Well, it may have influenced some of your account information,” thus, the company has announced that there was an attack by email that let in some ill-disposed players.

What Happened?

Now, the main thing is to know what exactly happened. Well, as we have mentioned above that their Cybersecurity team newly identified and shut down an ill-disposed attack against their email merchant that led to the illegal entrance to some T‑Mobile employee email accounts.

Out of that, some of the accounts contained information for T‑Mobile customers and employees.

Soon, an investigation was initiated, with support from preceding cybersecurity forensics specialists, to ascertain what happened and what information was moved. Not only this, they directly informed this matter to federal law enforcement and are actively assisting their investigation. Thus, T‑Mobile is in the process of notifying customers.

Though the telecom company did not reveal how the violation happened, when it occurred, and specifically how many workers and users did affect, it did verify that the dripped information on its users doesn’t include financial information like credit card and Social Security numbers.

What Information Involved?

As we said earlier that the company did not reveal exact information, but there are some common that are revealed by them.

Thus, the personal information obtained could add names and addresses, Social Security numbers, financial account information, and government identification numbers, as well as phone numbers, billing and account information, and rate plans and features as well.

Thus, the exposed data of an undisclosed number of concerned users include their:-   

  • Names
  • Phone Numbers
  • Account Numbers
  • Rate plans and features
  • Billing information

Well, the company stated that “they regret that this conflict happened. Hence, they consider the security of your information very sincere. While they have several safeguards in position to guard customer information against unauthorized access, they are also working on further simply to improve the security so that they can stay advanced and guard against this type of activity”.

So, what do you think about this? Simply share all your views and thoughts in the comment section below. And if you liked this post, then simply do not forget to share this post with your friends, family, and on your social profiles.

Follow us on TwitterLinkedinFacebook for Daily cyber security & hacking news updates.


Latest articles

Researchers Exploited Nexus Repository Using Directory Traversal Vulnerability

Hackers target and exploit GitHub repositories for a multitude of reasons and illicit purposes.The...

DDNS Service In Fortinet Or QNAP Embedded Devices Exposes Sensitive Data, Researchers Warn

Hackers employ DNS for various purposes like redirecting traffic to enable man-in-the-middle attacks, infecting...

PoC Exploit Released For macOS Privilege Escalation Vulnerability

A new vulnerability has been discovered in macOS Sonoma that is associated with privilege...

CatDDoS Exploiting 80+ Vulnerabilities, Attacking 300+ Targets Daily

Malicious traffic floods targeted systems, servers, or networks in Distributed Denial of Service (DDoS)...

GNOME Remote Desktop Vulnerability Let Attackers Read Login Credentials

GNOME desktop manager was equipped with a new feature which allowed remote users to...

Kesakode: A Remote Hash Lookup Service To Identify Malware Samples

Today marks a significant milestone for Malcat users with the release of version 0.9.6,...

Cisco Firepower Vulnerability Let Attackers Launch SQL Injection Attacks

 A critical vulnerability has been identified in Cisco Firepower Management Center (FMC) Software's web-based...
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

Live API Attack Simulation

94% of organizations experience security problems in production APIs, and one in five suffers a data breach. As a result, cyber-attacks on APIs increased from 35% in 2022 to 46% in 2023, and this trend continues to rise.
Key takeaways include:

  • An exploit of OWASP API Top 10 vulnerability
  • A brute force ATO (Account Takeover) attack on API
  • A DDoS attack on an API
  • Positive security model automation to prevent API attacks

Related Articles