In Thursday’s financial report, T-Mobile revealed that hackers accessed a large amount of personal data belonging to 37 million customers.
The telecommunications giant said “malicious individuals” began stealing data. This “includes information such as your name, billing address, email, phone number, date of birth, T-Mobile account number, and the number of lines and plans in your account feature”, starting Nov. 25.
In its SEC filing, T-Mobile said it detected the breach more than a month later, on January 5, and fixed the issue exploited by the hackers within a day.
T-Mobile said the hackers didn’t compromise the company’s systems, but exploited an application programming interface (API).
“While our investigation is still ongoing, at this time the malicious activity appears to be fully contained and we are currently aware that a malicious individual has infiltrated or compromised our systems and networks. There is no evidence that,” the company wrote.
This is the eighth time T-Mobile has been hacked since 2018. The most recent incident was in 2022, when a group of hackers known as Lapsus$ were able to gain access to the company’s internal tools and were given the opportunity to take action. This is a type of hack in which a hacker hijacks a victim’s phone number and uses it to reset and access sensitive accounts such as emails and cryptocurrency wallets.
T-Mobile did not immediately respond to a request for comment.
