More than 100 million T-Mobile customers are affected

Aug 16, 2021 16:30 GMT  ·  By

T-Mobile is investigating a forum post claiming to sell a treasure trove of personal data, according to Vice.

Motherboard says the seller obtained data from over 100 million customers along with T-Mobile's server infrastructure. The statement comes after they obtained samples of the data and found that they were in possession of accurate information about subscriber data. T-Mobile confirmed in a statement to Motherboard that it was aware of the authenticity of the claims, but they do no have further information on the matter.

The seller said in an online chat that he has full customer information of T-Mobile USA, adding that "I think they already found out because we lost access to the backdoored servers," referring to T-Mobile's potential response to the breach. While T-Mobile had subsequently dumped the data from the hacked systems, the threat actor had already copied the data locally.

The hacker wishes to receive 6 Bitcoins in exchange for the data

The seller is asking for 6 Bitcoins, about $270,000, on the underground forum for a data package containing 30 million Social Security and driver's license numbers. The cybercriminal stated that the rest of the data, which includes phone numbers, physical names or unique IMEI numbers is currently being sold privately.

The telecom company has been the victim of a data breach several times, according to The Verge. The most recent attack took place last December, and it's possible that call-related information and phone numbers of some of the company's customers were exposed. However, the company said at the time that no other sensitive information, such as names or Social Security numbers, was captured.

A T-Mobile data breach in March 2020 exposed financial data, Social Security numbers, and other account information of some of the company's customers. In 2018, hackers obtained personal information of about 2 million T-Mobile users, including names, addresses, and account numbers