T-Mobile just reported a new security breach. And according to Reuters, the breach happened around January 5th and left 37 million accounts compromised.
On its own website, T-Mobile alerted its customers of the breach and promised that no financial information was compromised. Within 24 hours of discovering the breach, they were able to shut it down right away. The Un-carrier said that “a bad actor used a single Application Programming Interface (or API) to obtain limited types of information” on the accounts of its customers.
As mentioned by T-Mobile:
No passwords, payment card information, social security numbers, government ID numbers or other financial account information were compromised. Some basic customer information (nearly all of which is the type widely available in marketing databases or directories) was obtained, including name, billing address, email, phone number, date of birth, account number, and information such as the number of lines on the account and service plan features.
Right now, affected customers are being notified by T-Mobile for transparency. They also promised to continue to improve the strength of its cybersecurity program.
