It's Only May, But T-Mobile Has Already Been Hacked Twice

pcmag.com:

For the second time this year, T-Mobile disclosed a data breach which saw the personal information of customers stolen.

As Bleeping Computer reports(Opens in a new window), T-Mobile disclosed the breach on April 28 through a letter(Opens in a new window) sent out to affected customers. In the letter T-Mobile explains how, "a bad actor accessed limited information from a small number of T-Mobile accounts," and that access occurred between late February and March this year.

In total, 836 customers are thought to have been affected. The customer information accessed by the hacker includes full name, data of birth, contact information, account number, associated phone numbers, social security number, government ID, T-Mobile account PIN, balance due, number of lines, and T-Mobile internal codes used to service customer accounts.

Affected customers have had their T-Mobile account PIN reset automatically and the company is offering two years of free credit monitoring and identity theft detection through myTrueIdentity from Transunion. Customers have until Aug. 31 to sign up for the service. Choosing a new PIN can be done either through logging into T-Mobile.com or calling the customer care team.

This latest breach, although serious, pales in comparison to the breach T-Mobile suffered in January when a hacker managed to steal the personal information of 37 million customers. The company has suffered eight data breaches since 2019 and last year agreed to pay $350 million to settle a class-action lawsuit focused on a 2021 data breach which exposed the information of more than 76 million people.

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain