Sunday, October 18, 2026

T-Mobile Hacked – Hackers Accessed Employee’s Emails and Users Sensitive Data

US-based telecom giant T-Mobile has undergone yet another data breach this time, revealing personal account data of both its employees and customers.

We have previously reported a T-mobile data breach in last year and this current breach notification posted on their website, T-Mobile persists on to state that its cybersecurity team newly discovered a sophisticated cyber-attack upon the email accounts of some of its employees. 

Thus, in-service had appeared in the unauthorized access to sensitive information, including details of its customers and employees.

Therefore, “they want you to know about a sophisticated attack that they newly recognized and immediately shut down. Well, it may have influenced some of your account information,” thus, the company has announced that there was an attack by email that let in some ill-disposed players.

What Happened?

Now, the main thing is to know what exactly happened. Well, as we have mentioned above that their Cybersecurity team newly identified and shut down an ill-disposed attack against their email merchant that led to the illegal entrance to some T‑Mobile employee email accounts.

Out of that, some of the accounts contained information for T‑Mobile customers and employees.

Soon, an investigation was initiated, with support from preceding cybersecurity forensics specialists, to ascertain what happened and what information was moved. Not only this, they directly informed this matter to federal law enforcement and are actively assisting their investigation. Thus, T‑Mobile is in the process of notifying customers.

Though the telecom company did not reveal how the violation happened, when it occurred, and specifically how many workers and users did affect, it did verify that the dripped information on its users doesn’t include financial information like credit card and Social Security numbers.

What Information Involved?

As we said earlier that the company did not reveal exact information, but there are some common that are revealed by them.

Thus, the personal information obtained could add names and addresses, Social Security numbers, financial account information, and government identification numbers, as well as phone numbers, billing and account information, and rate plans and features as well.

Thus, the exposed data of an undisclosed number of concerned users include their:-   

  • Names
  • Phone Numbers
  • Account Numbers
  • Rate plans and features
  • Billing information

Well, the company stated that “they regret that this conflict happened. Hence, they consider the security of your information very sincere. While they have several safeguards in position to guard customer information against unauthorized access, they are also working on further simply to improve the security so that they can stay advanced and guard against this type of activity”.

So, what do you think about this? Simply share all your views and thoughts in the comment section below. And if you liked this post, then simply do not forget to share this post with your friends, family, and on your social profiles.

Follow us on Twitter, Linkedin, Facebook for Daily cyber security & hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News