Categories: Data Breach

T-Mobile Hacked – Hackers Accessed Employee’s Emails and Users Sensitive Data

US-based telecom giant T-Mobile has undergone yet another data breach this time, revealing personal account data of both its employees and customers.

We have previously reported a T-mobile data breach in last year and this current breach notification posted on their website, T-Mobile persists on to state that its cybersecurity team newly discovered a sophisticated cyber-attack upon the email accounts of some of its employees. 

Thus, in-service had appeared in the unauthorized access to sensitive information, including details of its customers and employees.

Therefore, “they want you to know about a sophisticated attack that they newly recognized and immediately shut down. Well, it may have influenced some of your account information,” thus, the company has announced that there was an attack by email that let in some ill-disposed players.

What Happened?

Now, the main thing is to know what exactly happened. Well, as we have mentioned above that their Cybersecurity team newly identified and shut down an ill-disposed attack against their email merchant that led to the illegal entrance to some T‑Mobile employee email accounts.

Out of that, some of the accounts contained information for T‑Mobile customers and employees.

Soon, an investigation was initiated, with support from preceding cybersecurity forensics specialists, to ascertain what happened and what information was moved. Not only this, they directly informed this matter to federal law enforcement and are actively assisting their investigation. Thus, T‑Mobile is in the process of notifying customers.

Though the telecom company did not reveal how the violation happened, when it occurred, and specifically how many workers and users did affect, it did verify that the dripped information on its users doesn’t include financial information like credit card and Social Security numbers.

What Information Involved?

As we said earlier that the company did not reveal exact information, but there are some common that are revealed by them.

Thus, the personal information obtained could add names and addresses, Social Security numbers, financial account information, and government identification numbers, as well as phone numbers, billing and account information, and rate plans and features as well.

Thus, the exposed data of an undisclosed number of concerned users include their:-   

  • Names
  • Phone Numbers
  • Account Numbers
  • Rate plans and features
  • Billing information

Well, the company stated that “they regret that this conflict happened. Hence, they consider the security of your information very sincere. While they have several safeguards in position to guard customer information against unauthorized access, they are also working on further simply to improve the security so that they can stay advanced and guard against this type of activity”.

So, what do you think about this? Simply share all your views and thoughts in the comment section below. And if you liked this post, then simply do not forget to share this post with your friends, family, and on your social profiles.

Follow us on TwitterLinkedinFacebook for Daily cyber security & hacking news updates.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by Applying a Critical Fix

In a recent development, the SPAWNCHIMERA malware family has been identified exploiting the buffer overflow…

22 hours ago

Sitevision Auto-Generated Password Vulnerability Lets Hackers Steal Signing Key

A significant vulnerability in Sitevision CMS, versions 10.3.1 and earlier, has been identified, allowing attackers…

22 hours ago

NSA Allegedly Hacked Northwestern Polytechnical University, China Claims

Chinese cybersecurity entities have accused the U.S. National Security Agency (NSA) of orchestrating a cyberattack…

22 hours ago

ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials

The ACRStealer malware, an infostealer disguised as illegal software such as cracks and keygens, has…

22 hours ago

Nagios XI Flaw Exposes User Details and Emails to Unauthenticated Attackers”

A security vulnerability in Nagios XI 2024R1.2.2, tracked as CVE-2024-54961, has been disclosed, allowing unauthenticated…

1 day ago

Critical UniFi Protect Camera Vulnerability Enables Remote Code Execution Attacks

Ubiquiti Networks has issued an urgent security advisory (Bulletin 046) warning of multiple critical vulnerabilities…

1 day ago