Mint Mobile is the latest to get attacked with a security breach just before Christmas.
Affected customers received an email alerting them of the attack last December 22nd. The email, entitled “Important information regarding your account,” contained the following message:
"We are writing to inform you about a security incident we recently identified in which an unauthorized actor obtained some limited types of customer information.
Our investigation indicates that certain information associated with your account was impacted."
According to the email, the attackers gained access to customer data, which include the following information:
Name
Telephone number
Email address
SIM serial number and IMEI number
A brief description of service plan purchased
Since Mint does not store credit card numbers, these were not exposed in the attack. Moreover, they protect passwords using “strong cryptographic technology,” which makes them confident that these were not compromised.
On Reddit, a Mint moderator confirmed that the email was legit and not a scam:
"If you received a notice via email from no-reply@account.mintmobile.com on December 22, 2023, it is from Mint and is not a scam. The Customer Care number was setup to handle specific questions about this communication."
The data included information that can be used in SIM swap attacks, which is concerning to those affected by it. If you were among those who received an email from Mint Mobile, it’s best that you keep an eye out on suspicious activity involving your number as it might be used to make a SIM swap request.
For more information, you can call customer support at 949-704-1162. Mint says that they are already working with third-party cybersecurity experts to make their systems more secure. No further action is required at this point.
Source: BleepingComputer
