T-Mobile said Monday that hackers had breached its internal servers and that company investigators are determining whether the incident was a theft of sensitive customer data.
“We have determined that unauthorized access to some T-Mobile data occurred, however we have not determined that any personal customer data was involved,” the company said in a statement. “We have been working around the clock to investigate allegations that T-Mobile data may have been accessed illegally.”
The information is one day after the motherboard reported that a forum post a campaign contains a trove of data for sale. The post did not mention T-Mobile, but the retailer told the publication that the data related to more than 100 million people and came from T-Mobile servers.
The seller says the data includes Social Security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver’s license numbers. Motherboard confirmed that samples of the data provided by the vendor “contain accurate information on T-Mobile customers.”
Ars is unable to verify the authenticity of the claims of the person who published the post and spoke to Motherboard.
By some estimates, T-Mobile has experienced as many as six separate data breaches in recent years. They include a cut in 2018 that is offered unauthorized access to customer names, billing ZIP codes, phone numbers, email addresses, and account numbers. Was worshiped from replyThe hacker absconded with data including customer names and addresses, phone numbers, account numbers, system rates and features, and billing information.
According to report by journalist Jeremy Kirk, the person responsible for the latest T-Mobile hack says they gained unauthorized access using an unscheduled exploit GPRS gatewaywhich carriers use in 2G or 3G cellular communications.
The person who claims to have hacked T-Mobile says the company fixed a GPRS gateway error that was apparently used for testing. It has been exposed to the internet. That allows people to eventually pivot to LAN. Screenshot proof provided. pic.twitter.com/tBMvRBmG0r
– Jeremy Kirk (@jkirk.bsky.social) (@Jeremy_Kirk) August 16, 2021
If claims that data for 100 million people have been hacked are true, this new breach will be among the largest mobile data breaches ever.