

The company said the names, phone numbers and account PINs for roughly 850,000 active prepaid accounts also were exposed.
TMOBILE BREACH LICENSE
In an updated statement posted to its website, T-Mobile said some of the data included first and last names, dates of birth, Social Security numbers and driver's license or ID information.

In Thursday's filing, T-Mobile noted that it began a "substantial multi-year investment" to improve its cybersecurity in 2021.T-Mobile said about 7.8 million postpaid accounts and more than 40 million records of current and potential customers were compromised by a data breach. "While these cybersecurity breaches may not be systemic in nature, their frequency of occurrence at T-Mobile is an alarming outlier relative to telecom peers," senior analyst for Moody's Investors Service, Neil Mack, said in a statement sent to The Associated Press – noting that the latest breach raises questions about management's cyber governance and could alienate customers, as well as attract scrutiny from regulators. What's everyone talking about? Sign up for our trending newsletter to get the latest news of the day Prior to August 2021, customer information was accessed in breaches that T-Mobile disclosed in January 2021, November 2019 and August 2018. In the settlement, T-Mobile also said it would spend at least $150 million through 20 "for data security and related technology." In July, T-Mobile agreed to pay $350 million to settle a class action lawsuit after the company disclosed in August 2021 that personal data – including Social Security numbers and driver's license information – had been stolen. November's breach doesn't mark the first time T-Mobile customers have had their data stolen.

But the company said it did not expect the incident to have "material effect" on its operations.

Thursday's filing noted that T-Mobile may "incur significant expenses" because of the hack. "We plan to continue to make substantial, multi-year investments in strengthening our cybersecurity program."ĭatabase: 40 million Americans' health data is stolen or exposed each year. "We understand that an incident like this has an impact on our customers and regret that this occurred," T-Mobile stated. In a Thursday news release, T-Mobile said it was currently in the process of notifying customers who were impacted by the breach. Will T-Mobile notify customers impacted by the breach? The company added that it has notified law enforcement and federal agencies, which were not named in the filing. "Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time, and there is currently no evidence that the bad actor was able to breach or compromise our systems or our network," T-Mobile said in its Thursday filing. More: Amazon discontinues charity donation program that raised nearly $500 million as layoffs continueĪfter learning about the breach, T-Mobile said it "promptly commenced an investigation with external cybersecurity experts" and was "able to trace the source of the malicious activity and stop it" within a day. T-Mobile said that, based on its investigation to date, "customer accounts and finances were not put at risk directly by this event." No credit card information, passwords, Social Security numbers, government ID numbers or other financial account information was exposed in the breach, T-Mobile said.Ĭompany job cuts: Google to lay off 12,000 employees, the latest tech giant to cut thousands of jobs The malicious intruder accessed a "limited set of customer account data" – including names, addresses, emails, phone numbers and dates of birth. 25 through a single Application Programming Interface, the company said. 5. The unidentified hacker (or hackers) obtained data starting around Nov. Securities and Exchange Commission, T-Mobile said the hack was discovered on Jan. Watch Video: Have you been pwned? See if your info has been hacked.Ī "bad actor" stole personal information from approximately 37 million T-Mobile customers in a November data breach, the company said on Thursday.
