T-Mobile says data on 37 million customers stolen

The U.S. wireless carrier T-Mobile said Thursday that an unidentified malicious intruder breached its network in late November and stole data on 37 million customers, including addresses, phone numbers and dates of birth.

Associated Press

Jan 20, 2023, 12:23 PM

Updated 553 days ago

Share:

The U.S. wireless carrier T-Mobile said Thursday that an unidentified malicious intruder breached its network in late November and stole data on 37 million customers, including addresses, phone numbers and dates of birth.
T-Mobile said in a filing with the U.S. Securities and Exchange Commission that the breach was discovered Jan. 5. It said the data exposed to theft — based on its investigation to date — did not include passwords or PINs, bank account or credit card information, Social Security numbers or other government IDs.
“Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time,” T-Mobile said, with no evidence the intruder was able to breach the company's network. It said the data was first accessed on or around Nov. 25.
T-Mobile said it has notified law enforcement and federal agencies, which it did not name. It did not immediately respond to an e-mail seeking comment.
The company has been hacked multiple times in recent years. In its filing, T-Mobile said it did not expect the latest breach to have material impact on its operations. But a senior analyst for Moody's Investors Service, Neil Mack, said in a statement that the breach raises questions about management's cyber governance and could alienate customers and attract scrutiny by the Federal Communications Commission and other regulators.
“While these cybersecurity breaches may not be systemic in nature, their frequency of occurrence at T-Mobile is an alarming outlier relative to telecom peers,” Mack said.
In July, T-Mobile agreed to pay $350 million to customers who filed a class action lawsuit after the company disclosed in August 2021 that personal data including Social Security numbers and driver's license info had been stolen. Nearly 80 million U.S. residents were affected.
It also said at the time that it would spend $150 million through 2023 to fortify its data security and other technologies.
Prior to the August 2021 intrusion, the company disclosed breaches in January 2021, November 2019 and August 2018 in which customer information was accessed.
T-Mobile, based in Bellevue, Washington, became one of the country’s largest cellphone service carriers in 2020 after buying rival Sprint. It reported having more than 102 million customers after the merger.


More from News 12
1:40
Lithium-ion battery fire blamed for closure of Newburgh tailor shop

Lithium-ion battery fire blamed for closure of Newburgh tailor shop

1:56
Sunny skies and warm temps for Saturday in the Hudson Valley

Sunny skies and warm temps for Saturday in the Hudson Valley

0:38
Multimillion-dollar transformation on the way for sections of Hudson Valley

Multimillion-dollar transformation on the way for sections of Hudson Valley

0:32
Veteran firefighter who suffered stroke receives warm welcome home

Veteran firefighter who suffered stroke receives warm welcome home

0:17
Yorktown police sergeant celebrates final walkout following 2 decades of service

Yorktown police sergeant celebrates final walkout following 2 decades of service

0:52
Slate Hill family of 5 loses home in afternoon blaze

Slate Hill family of 5 loses home in afternoon blaze

0:37
2 people charged in Middletown narcotics; firearms bust

2 people charged in Middletown narcotics; firearms bust

1:30
Motorcycle, van crash in Greenburgh causes serious injuries

Motorcycle, van crash in Greenburgh causes serious injuries

0:56
News 12 probes mystery cloud traced to Orange County & seen throughout tri-state area

News 12 probes mystery cloud traced to Orange County & seen throughout tri-state area

1:02
Hillcrest Fire Department receives 2,000 cans of drinking water, courtesy of Anheuser-Busch

Hillcrest Fire Department receives 2,000 cans of drinking water, courtesy of Anheuser-Busch

1:37
Storm Watch Team Meteorologist Skyler Harman strikes down lightning myths

Storm Watch Team Meteorologist Skyler Harman strikes down lightning myths

2:33
Can swimming become dangerous due to extremely high water surface temperatures?

Can swimming become dangerous due to extremely high water surface temperatures?

0:32
NYC officials: Westchester caseworker’s death ruled a homicide

NYC officials: Westchester caseworker’s death ruled a homicide

0:40
State, federal lawmakers introduce legislation to shorten funding gap for World Trade Center Health Program

State, federal lawmakers introduce legislation to shorten funding gap for World Trade Center Health Program

0:34
Ex Frito-Lay employee files defamation lawsuit against PepsiCo claiming he invented ‘Flamin’ Hot Cheetos

Ex Frito-Lay employee files defamation lawsuit against PepsiCo claiming he invented ‘Flamin’ Hot Cheetos

0:40
Executive orders still in place preventing Rockland County and Orange County hotels from converting into migrant shelters

Executive orders still in place preventing Rockland County and Orange County hotels from converting into migrant shelters

0:54
Headlines: Drug ring prison sentence, Newburgh felony charge, uptick in car thefts in Briarcliff Manor

Headlines: Drug ring prison sentence, Newburgh felony charge, uptick in car thefts in Briarcliff Manor

0:20
Man sentence to 10 years in prison for running Orange County drug ring

Man sentence to 10 years in prison for running Orange County drug ring

1:18
Town of Wallkill propose noise ordinances at Orange County fairgrounds

Town of Wallkill propose noise ordinances at Orange County fairgrounds

0:34
Finger in salad lawsuit against Chop’t discontinued

Finger in salad lawsuit against Chop’t discontinued