T-Mobile Cyber Attack Exposed Personal Data of More Than 54 Million Customers


T-Mobile's third major customer data leak in two years resulted in the exposure of personal information of more than 54 million of the company's customers. The American hacker who is claiming responsibility for the attack told the Wall Street Journal that T-Mobile's "awful" security helped him gain access to millions of customer records.

John Binns, who currently resides in Turkey, said he broke into T-Mobile's servers around August 4. He said he breached the company's network after discovering an unprotected router, which he used to access T-Mobile's data center in Washington state. He was able to access everything from birthdays to social security numbers through the breach, including customers' unique phone-linked IMEI and IMSI numbers.

Last week T-Mobile said their investigation into the breach with the FCC is ongoing, but that the company is confident it has closed off the access point used in the attack. T-Mobile is offering two years of free identity protection services through McAfee's ID Theft Protection Service to those impacted by the breach.

"As we support our customers, we have worked diligently to enhance security across our platforms and are collaborating with industry-leading experts to understand additional immediate and longer-term next steps," said the company in a statement. "We also remain committed to transparency as this investigation continues and will continue to provide updates if new information becomes available that impacts those affected or causes the details above to change or evolve."

The breach highlights the precarious position of many large and well-known companies vulnerable to network data breaches. In May, President Biden signed  a cybersecurity executive order focused on beefing up U.S. cyber protections, threat intelligence sharing and cyberattack response efforts. It specifically focuses on IT service providers, MSPs and MSSPs that work with the U.S. federal government.

T-Mobile has undergone six additional data breaches in the past four years.

Edited by Luke Bellos

TechZone360 Contributing Editor

Related Articles

How Your Company Can Maintain Its Cybersecurity in 2021 and Beyond

By: Special Guest    9/17/2021

Cybercrimes are continually on the rise, bringing more threats to organizations in the pandemic than before. Statistics show that as early as March…

Read More

Is Mining Cryptocurrency Still Viable?

By: Special Guest    9/17/2021

As cryptocurrency continues to grow, more and more people are getting in on the action. But is it worth mining? Click here to find out more.

Read More

The World Will Change With Bitcoin

By: Special Guest    9/15/2021

Financial freedom may increase more efficiently with digital currency than ever before. The consequences of this are profound. Millions of people …

Read More

From Driver's Licenses Proof of Vaccination to Fishing Licenses, the World is Going All-Digital

By: Erik Linask    9/13/2021

The State of Louisiana's LA Wallet app will soon allow users to upload not only digital driver's licenses and COVID-19 vaccination status, but also hu…

Read More

Apple Must Now Allow Alternative Direct Payment Options In App Store, Judge Rules

By: Luke Bellos    9/10/2021

A California judge ruled that Apple has not been proven to be a monopoly, but is participant in anti-competitive practices within the company's digita…

Read More