The seller told Motherboard on Sunday that they have obtained user data of more than 100 million users from T-Mobile servers. The Motherboard also saw samples of the data and confirmed that it contains accurate information.
The stolen data includes phone numbers, social security numbers, unique IMEI numbers, physical addresses, and driver’s licenses information of more than 100 million T-Mobile customers.
Oh gawd my Data…
"T-Mobile Investigating Claims of Massive Customer Data Breach – VICE" https://t.co/L2gbLXV6LF
— Scruff327 (@scruff327) August 15, 2021
“T-Mobile USA. Full customer info“ said the seller to Motherboard during an online chat. The hacker also said that they compromised not only one but several T-Mobile servers to steal user data.
On an underground forum, the hacker stated that they are selling a subset of data with social security numbers and driver licenses of around 30 million T-Mobile users for 6 bitcoin – that is around $278,781 at the time of writing, according to Coindesk. The rest of the data is being sold by the hacker privately.
The seller also said about T-Mobile that “I think they already found out because we lost access to the backdoored servers.”
Nonetheless, the hacker said that it wouldn’t make a difference as they have already backed up the stolen data in multiple places.
T-Mobile said in an official statement on Sunday that they are investigating the claims.
“We are aware of claims made in an underground forum and have been actively investigating their validity. We do not have any additional information to share at this time” – T-Mobile spokesperson.
Data Breach Implications on T-Mobile
After this statement from T-Mobile on Sunday, there has been no official response from them. If the data breach is confirmed, it will be a huge cybersecurity blow to the company that has been hit multiple times in recent years.
This past February, T-Mobile suffered a SIM swap attack, and in December last year, the company suffered another data breach that exposed its customers’ phone numbers and calls logs.
Cybersecurity attacks keep rising with each passing day as data companies are at the top of the targeting list of hackers. Recently, 1 million stolen credit cards hit the Dark Web with payment credentials on sale.
This data breach might be the biggest in history for T-Mobile. As of the second quarter of 2021, T-Mobile has over 104.7 million customers – therefore, this data breach may virtually affect every T-Mobile user. The extent of the damage is not confirmed, but you might want to be careful and watch out for suspicious activity if you are a T-Mobile subscriber.
