Slashdot Mirror


Hackers Stole Personal Data of 2 Million T-Mobile Customers (vice.com)

On late Thursday, T-Mobile revealed that hackers stole some of the personal data of 2 million people in a new data breach. From a report: In a brief intrusion, hackers stole "some" customer data including names, email addresses, account numbers, and other billing information. The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company. In its announcement, T-Mobile said that its cybersecurity team detected an "unauthorized capture of some information" on Monday, Aug. 20. A company spokesperson told me that the breach affected "about" or "slightly less than" 3% of its 77 million customers.

27 of 56 comments (clear)

  1. Is it "malicious hackers stole data of millions"? by Mr.+Dollar+Ton · · Score: 5, Interesting

    Or is it "reckless company did not protect the data of millions"?

    About time the blame is shared, no?

  2. Maybe they will pay my bill by jfdavis668 · · Score: 1

    Since they have my account number and billing information, maybe they will pay my bill.

  3. Filing a Mmissing-data report. by Anonymous Coward · · Score: 1

    "Hackers Stole Personal Data of 2 Million T-Mobile Customers "

    *checks servers*

    I'm happy to report the data has been located, and returned to it's owners.

  4. Re:Is it "malicious hackers stole data of millions by olsmeister · · Score: 1

    Yes.

  5. Re:Is it "malicious hackers stole data of millions by Anonymous Coward · · Score: 1

    About time the blame is shared, no?

    It is time, but I fear that many lawmakers (especially in the US) will never do anything which makes corporations actually liable for such things.

    Maybe do the Yakuza thing with the CIO ... you get hacked, you lose a digit. Never hire a CIO missing a digit.

    Far too many companies have far too lax security,and it really is time to make them bear the responsibility for it.

  6. Re:SSN? by olsmeister · · Score: 1

    Probably to do a credit check.

  7. "some" customer data including names, email addresses, account numbers, and other billing information.

    Maybe I'm just jaded, but judging by the catalogs I got in the mail, shoe companies (for example) that I'd never shopped at had at least this much information about me. In the nineties.

    (OK, in all seriousness, yeah, possible social engineering attacks and all that. Though I must point out, even I don't know my account number ... )

  8. Accountability by houghi · · Score: 1

    As long as that is a word that is meaningless, nothing will happen. And this goes for political situations as well as anything else.

    Basically, as long as they/you can get away with it, why would they/you care. There are three letter agenencies that have admitted to be doing illegal things. Nothing!

    Now imagine that this would happen at T-Mobile Germany. Even before the GDPR heads would roll and not just some poor IT guy. I am sure that at least the COO would have to be looking for a new job. And even that would not mean the end of it. Politicians would get involved and not in any way to calm things or protect the company.

    I often see people here citing laws, amendments and constitutions. As long as there is no accountability, they are as much of a plot device to tell a nice story as the three laws of robotics.

    --
    Don't fight for your country, if your country does not fight for you.
  9. Oh what good news... by Oswald+McWeany · · Score: 1

    The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company

    Way to spin a disaster... oh yeah, we got hacked... but they didn't get your Credit Card Number... BUT GOOD NEWS EVERYONE they just everything they need to know to sign you up for fake Credit Cards and otherwise fake your identity.

    --
    "That's the way to do it" - Punch
    1. Re:Oh what good news... by cascadingstylesheet · · Score: 1

      The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company

      Way to spin a disaster... oh yeah, we got hacked... but they didn't get your Credit Card Number... BUT GOOD NEWS EVERYONE they just everything they need to know to sign you up for fake Credit Cards and otherwise fake your identity.

      Not to defend them, but is there anyone on earth who doesn't know your name and address? Even junk mailers do.

    2. Re:Oh what good news... by JackieBrown · · Score: 1

      Are you saying you don't need a social security number to get a credit card?

  10. Re: Is it "malicious hackers stole data of million by Anonymous Coward · · Score: 3, Funny

    Catherine Zeta-Jones would say that this is, wait for it, wait for it...

    Entrapment.

    I'll show myself out now.

  11. Who could have seen it coming? by DRoKDev · · Score: 1

    I mean, they only stored their passwords in plaintext, who could have seen this kind of data breach coming? Their security "was amazingly good" after all! https://twitter.com/tmobileat/...

  12. Re: Is it "malicious hackers stole data of million by Mr.+Dollar+Ton · · Score: 1

    I would have been gladly entraped by her... 30 years ago.

  13. Wrong headline this is positive news by Anonymous Coward · · Score: 5, Interesting

    I know its not in good taste to actually read the article, but...

    The headline should read "T-Mobile in a break from most large corporation intrusions almost immediately detects and prevents breach in it's early stages protecting 97% of its customer data"

    T-Mobile caught the hack the SAME DAY and stopped it at 3%. Then publically reported it 4 days later rather than waiting for their executive board to cash out. Unless more information comes out to the contrary this should be held up as an example of success where a large company finally mostly protects their/your data and honestly reports details quickly.

    1. Re:Wrong headline this is positive news by dcollins117 · · Score: 1

      this should be held up as an example of success where a large company finally mostly protects their/your data and honestly reports details quickly.

      That's a pretty low bar for "success". I personally would reserve the word success for companies that have adequate security measures to prevent customer data from being improperly accessed. If any exist.

    2. Re:Wrong headline this is positive news by JackieBrown · · Score: 1

      You have to judge things based on the current bar. They stopped a hack and reported it. The only thing the hackers got was public information

    3. Re:Wrong headline this is positive news by nanospook · · Score: 1

      I agree, too often it's just covered up and everyone runs around like a headless chicken..

      --
      Have you fscked your local propeller head today?
    4. Re:Wrong headline this is positive news by HereIAmJH · · Score: 1

      I don't know the details of the hack; whether it was the result of incompetence or just a 'shit happens' situation. But as long as humans are involved, I doubt there will ever be a usable commercial network that can't be hacked. I agree with giving T-Mob credit for their response.

      OTOH, I wonder how Experian, a company that has every consumer by the balls, can stay in business after the kind of breach that they had.

      --
      Another day, another update to a Google android app.
  14. Re:Is it "malicious hackers stole data of millions by Mr.+Dollar+Ton · · Score: 2

    T-mobile wasn't "dressed provocatively", they just didn't want to pay for security. But congrats on the nice false equivalence.

  15. Re:SSN? by damn_registrars · · Score: 1

    Does T-Mobile even have customers' social security numbers? Why??

    I don't know if it is still their policy, but they used to ask for your SSN as a form of ID. A lot of people raised a stink over this, but I don't know that anything ever changed.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  16. I may not be a 1%-er by 93+Escort+Wagon · · Score: 1

    But now at least I’m a 3%-er... I got a text from T-Mobile last night, saying my info got stolen.

    Wanna lay odds that “3%” will be trending strongly upward over the next few days and weeks, and that they’ll eventually have to announce that the intruders got more of each customers’ info than originally thought?

    --
    #DeleteChrome
  17. Re:Is it "malicious hackers stole data of millions by Mr.+Dollar+Ton · · Score: 1

    If this was an "absolutely proper equivalence", your car insurance company would gladly pay for your stolen car which you left in a bad neighborhood with the keys in the ignition. However, they do not. Are they "blaming the victim" too? No, just like in the case above, when a party shirks the responsibilities that are expected of them (lock the car, keep the keys, secure their service), they are partly liable.

  18. Re:Is it "malicious hackers stole data of millions by Mr.+Dollar+Ton · · Score: 1

    +1, wrote almost the same thing above.

    / shaking a tiny fist.

  19. Re:Is it "malicious hackers stole data of millions by JackieBrown · · Score: 1

    Well the fact that they had social security numbers and credit card numbers secured differently says they they did more than the past companies that got hacked.

  20. Some strange spoof sms by 140Mandak262Jamuna · · Score: 1
    I got an SMS text alert saying the SIM card of one of my phone has been changed and it provided a link to click if that was not correct.

    The from address was spoofed and it appeared exactly as if it came from T Mobile. In fact the t-mobile phone displayed that message along with other legitimate text alerts from T-Mobile.

    I knew enough not to click on the link provided, and called T-Mobile. It was not a legitimate message. But they hackers were able to spoof the from address in the SMS. It happened yesterday. Not sure if that is a fall out of stolen email id.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  21. RUSSIAN hackers? by fygment · · Score: 1

    If not then where's the "news"?

    --
    "Consensus" in science is _always_ a political construct.