More than 40 million T-Mobile customers in the US have been hit by a data breach, the company has admitted.
It blamed the breach on a “highly sophisticated cyberattack”, and said it is “taking immediate steps to help protect all of the individuals who may be at risk from this cyberattack”.
The firm said that while criminals stole personal information, no financial details were leaked as a result.
The breach only came to light following online reports last weekend that criminals were attempting to sell a large database containing T-Mobile customer data online.
The telecom company confirmed that hackers had gained access to its systems on Monday.
“Late last week we were informed of claims made in an online forum that a bad actor had compromised T-Mobile systems,”
“We immediately began an exhaustive investigation into these claims and brought in world-leading cybersecurity experts to help with our assessment.
“We then located and immediately closed the access point that we believe was used to illegally gain entry to our servers.”
The company said its investigations identified approximately 7.8 million current T-Mobile postpaid customer accounts’ information in the stolen files, as well as just over 40 million records of former or prospective customers who had previously applied for credit with T-Mobile.
It said that approximately 850,000 active T-Mobile prepaid customer names, phone numbers and account PINs were also exposed but that it had reset the PINs on the accounts to protect customers.
It added that no phone numbers, account numbers, PINs, passwords, or financial information were compromised in any of the files of customers or prospective customers.
“We take our customers’ protection very seriously and we will continue to work around the clock on this forensic investigation to ensure we are taking care of our customers in light of this malicious attack,” the company said.
“While our investigation is ongoing, we wanted to share these initial findings even as we may learn additional facts through our investigation that cause the details above to change or evolve.”
This is not the first time hackers have stolen the personal information of T-Mobile customers and potential customers in the US. In 2015, it happened to 15 million consumers.
—
| NWIDA members, contact us today if you need our assistance and if you’re not yet a member, we invite you to join today. |  |
| Want news like this delivered to your inbox? Click HERE |  |
| Want news like this in your RSS feed? Click HERE |  |
| Want news like this delivered to your Alexa Flash Briefing? Click HERE |  |
| Join us on Reddit – Click HERE |  |