Categories: Data Breach

T-Mobile Hacked – Hackers Accessed Employee’s Emails and Users Sensitive Data

US-based telecom giant T-Mobile has undergone yet another data breach this time, revealing personal account data of both its employees and customers.

We have previously reported a T-mobile data breach in last year and this current breach notification posted on their website, T-Mobile persists on to state that its cybersecurity team newly discovered a sophisticated cyber-attack upon the email accounts of some of its employees. 

Thus, in-service had appeared in the unauthorized access to sensitive information, including details of its customers and employees.

Therefore, “they want you to know about a sophisticated attack that they newly recognized and immediately shut down. Well, it may have influenced some of your account information,” thus, the company has announced that there was an attack by email that let in some ill-disposed players.

What Happened?

Now, the main thing is to know what exactly happened. Well, as we have mentioned above that their Cybersecurity team newly identified and shut down an ill-disposed attack against their email merchant that led to the illegal entrance to some T‑Mobile employee email accounts.

Out of that, some of the accounts contained information for T‑Mobile customers and employees.

Soon, an investigation was initiated, with support from preceding cybersecurity forensics specialists, to ascertain what happened and what information was moved. Not only this, they directly informed this matter to federal law enforcement and are actively assisting their investigation. Thus, T‑Mobile is in the process of notifying customers.

Though the telecom company did not reveal how the violation happened, when it occurred, and specifically how many workers and users did affect, it did verify that the dripped information on its users doesn’t include financial information like credit card and Social Security numbers.

What Information Involved?

As we said earlier that the company did not reveal exact information, but there are some common that are revealed by them.

Thus, the personal information obtained could add names and addresses, Social Security numbers, financial account information, and government identification numbers, as well as phone numbers, billing and account information, and rate plans and features as well.

Thus, the exposed data of an undisclosed number of concerned users include their:-   

  • Names
  • Phone Numbers
  • Account Numbers
  • Rate plans and features
  • Billing information

Well, the company stated that “they regret that this conflict happened. Hence, they consider the security of your information very sincere. While they have several safeguards in position to guard customer information against unauthorized access, they are also working on further simply to improve the security so that they can stay advanced and guard against this type of activity”.

So, what do you think about this? Simply share all your views and thoughts in the comment section below. And if you liked this post, then simply do not forget to share this post with your friends, family, and on your social profiles.

Follow us on Twitter, Linkedin, Facebook for Daily cyber security & hacking news updates.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago