T-Mobile confirms hackers gained access to its systems, following reports that sensitive data, including SSNs, for over 100M people was for sale on the dark web

“We have determined that unauthorized access to some T-Mobile data occurred.” — Joseph Cox Source: T-Mobile .

VICE 2021-08-17 Joseph Cox

Context & Ripple Effects

T-Mobile’s confirmation follows its investigation of the theft claims a day earlier. It also extends a record of disclosed customer-data incidents, from a 2018 breach affecting about 2 million accounts to a 2019 incident affecting more than one million customers.

The scale and sensitivity alleged here raise the stakes as T-Mobile, AT&T, and Verizon are already pursuing customers from one another. Data protection becomes a more immediate trust issue in that competition, not merely a back-office security matter.

First-order effects

People whose records were accessed face exposure of highly sensitive identity information, while T-Mobile must manage the confirmed intrusion and its customer fallout.
T-Mobile’s security posture is immediately under scrutiny after prior customer-data incidents, including the 2019 breach affecting more than one million customers.

Second-order effects

AT&T and Verizon gain a sharper trust-based angle for their customer-poaching efforts as T-Mobile addresses the breach.
Repeated incidents increase the operational priority for T-Mobile to limit how much customer information can be reached in a single compromise, rather than treating each disclosure as isolated.

Third-order effects

If major carrier breaches continue to expose large customer datasets, breach containment and [[a:concepts#blast-radius-architecture|blast-radius architecture]] become competitive requirements alongside network and pricing claims.
The pattern points toward customer-data security becoming a durable source of switching pressure in US wireless competition.

The trend: Wireless carriers are being judged increasingly on whether their systems can contain customer-data exposure as well as on service offerings.

Discussion

@josephfcox Joseph Cox on x
New: T-Mobile confirms it was hacked. Comes after we reported company investigating breach. We previously obtained samples of the data, confirmed they contain real T-Mobile account info. Data contains SSNs, driver license, IMEI, address, etc, seller said https://www.vice.com/...
@knieriemen Greg Knieriemen on x
I love T-Mobile's service but this looks like a pretty big deal. Data protection strategies have to include heavy scrutiny of what data is being stored and where. Do SS numbers and driver licenses information all need online access? https://www.vice.com/...
@odell @odell on x
advocates for forced data collection on billions of individuals are responsible for these data breaches “data includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver licenses information” https://www.vice.com/...
@jason_koebler Jason Koebler on x
NEW: Hackers are claiming to have breached T-Mobile's systems and stolen data on 100 million American customers. Samples of data check out, T-Mobile investigating https://www.vice.com/...
@lorenzofb Lorenzo Franceschi-Bicchierai on x
NEW: T-Mobile confirms it was hacked. “We have determined that unauthorized access to some T-Mobile data occurred, however we have not yet determined that there is any personal customer data involved.” https://www.vice.com/...
@briankrebs @briankrebs on x
T-Mobile says it's investigating a breach of user data, Hackers claim it affects > 100M US customers & exposes SSN, DOB, address, phone # for 36M customers. The person allegedly behind the hack is tied to the Satori botnet & has sued the FBI and CIA. https://krebsonsecurity.com/ …
@mshelton Martin on x
“The data includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver licenses information...Motherboard has seen samples of the data, and confirmed they contained accurate information on T-Mobile customers.” https://www.vice.com/..…
@chronotope Aram Zucker-Scharff on x
Wait, is it normal for your cellphone provider to have your social security and driver's license? I don't recall giving my provider that? https://www.vice.com/... https://twitter.com/...
@josephfcox Joseph Cox on x
Here's is T-Mobile's statement. They say they haven't yet determined any personal customer data was involved. We have seen samples of data allegedly from this breach that contain personal information https://www.vice.com/... https://twitter.com/...
@vice @vice on x
T-Mobile confirmed hackers gained access to the telecom giant's systems in an announcement published Monday. https://www.vice.com/...
@bdsams Brad Sams on x
Their next uncarrier event will be for a lifetime of identity protection. https://twitter.com/...
@chrisblec Chris Blec on x
So, @TMobile was hacked again. Just a reminder, here is all of your info that's available for hackers to swoop in & grab from TMobile. Web history? Geolocation history? SMS? Biometrics? Voiceprint? All there, waiting to get stolen. KYC fcuks us again. https://www.t-mobile.com/...…
@deviantollam @deviantollam on x
as a T-Mobile customer for years, i'm less interested in SSN and billing data compromises than I am in whether things like call records, texts, etc. were part of this breach... https://www.vice.com/... ...lots of PII, client info, etc. leaks into that kind of space (1/2)
@lorenzofb Lorenzo Franceschi-Bicchierai on x
To be honest...I have lost count of how many times T-Mobile has been hacked.
@seahawkerholm @seahawkerholm on x
Breaking News Another potential large data breach, this time for Tmobile customers. If so, sounds like all customer profile info has been compromised to include SSNs, addresses and driver license info. #TMobile #databreach likely. https://www.vice.com/...
@vice @vice on x
Social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and drivers license information of customers was acquired by hackers in the breach. https://www.vice.com/...

Chronicles