T-Mobile Security Breach Affects 1 Million Prepaid Customers

Photo via Engadget

Yesterday, T-Mobile disclosed a security breach affecting nearly a million of its prepaid service customers. The exploiters hacked the customers’ personal information including billing addresses, except social security numbers and credit card information. It happened at the beginning of this month, which was immediately shut down after T-Mobile discovered the exploit.

The company released a statement regarding the security breach. They explained the amount of information that was impacted by T-Mobile prepaid customers and the call to action after the breach happened.

Dear Customer,

We want to let you know about an incident that we recently identified and quickly corrected that impacted some of your personal information.

Our Cybersecurity team discovered and shut down malicious, unauthorized access to some information related to your T-Mobile prepaid wireless account. We promptly reported this to authorities. None of your financial data (including credit card information) or social security numbers was involved, and no passwords were compromised.

The data accessed was information associated with your prepaid service account, including name and billing address (if you provided one when you established your account), phone number, account number, rate plan and features, such as whether you added an international calling feature. Rate plan and features of your voice calling service are “customer proprietary network information” (“CPNI”) under FCC rules, which require we provide you notice of this incident.

We take the security of your information very seriously and have a number of safeguards in place to protect your personal information from unauthorized access. We truly regret that this incident occurred and apologize for any inconvenience this has caused you.

Therefore, T-Mobile has already reported the incident to local authorities and they take the security of every customer’s information very seriously. The breach did not affect user passwords, billing information and social security numbers. The company always has to give notice to their customers every time a security breach happens to inform customers that their customer proprietary network information is affected.