Product reviews, deals and the latest tech news

T-Mobile Data Breach: Another Day, Another Breach

T-Mobile has had a rough start to the new year, having reported this week that another data breach had taken place, compromising the personal information of around 37 million customers. Data about customers was lost in this incident, which is not the case in all cases of data loss. T-Mobile reports that in this data breach, account information including names, billing addresses, emails, phone numbers, dates of birth, account numbers, and account specifics including the number of lines and service package features were accessed.

T-Mobile attempts to soften the blow by saying that the vast majority of this information is “widely accessible” via marketing directories and databases. The company stresses that “no passwords, credit card information, social security numbers, government ID numbers, or other financial account information were stolen.”

We are currently in the process of informing impacted customers that after a thorough investigation we have determined that a bad actor used a single Application Programming Interface (or API) to obtain limited types of information on their accounts.

As soon as our teams identified the issue, we shut it down within 24 hours. Our systems and policies prevented the most sensitive types of customer information from being accessed, and as a result, customer accounts and finances should not be put at risk directly by this event. There is also no evidence that the bad actor breached or compromised T-Mobile’s network or systems.

T-Mobile says that once the suspicious behaviour was discovered, it was shut down within 24 hours. T-Mobile claims in a document filed with the SEC, but not in its news release, that it thinks the “bad actor” began accessing data through the affected API as early as November of last year.

T-Mobile concludes its SEC report by saying it does not anticipate any significant impact from this development on its business. To put it another way, they aren’t worried that clients would be very angry and decide to go elsewhere.