Hackers Claimed To Steal Data of 100 Million T-Mobile Customers – Server Hack Confirmed
T-Mobile suffered a files breach that contains the private small print of bigger than 100 million potentialities. In an announcement published Monday, T-Mobile confirmed that hackers obtained get entry to to the telecom huge’s programs.
“We now possess certain that unauthorized get entry to to a couple of T-Mobile files occurred, then again, now we possess no longer yet certain that there is any private customer files though-provoking,” T-Mobile wrote in its announcement.
T-Mobile says their investigation will take some time and confirms they are working with the supreme diploma of urgency.
“Until we have completed this assessment we cannot confirm the reported number of records affected or the validity of statements made by others”, T-Mobile confirms.
T-Mobile Files Breach
A threat actor become selling the alleged private files for 100 million T-Mobile potentialities after they breached database servers operated by the mobile network.
T-Mobile mentions that it is investigating a discussion board submit claiming to be selling a mountain of private files. The seller steered Motherboard they possess got bought files linked to over 100 million folk, and that the knowledge came from T-Mobile servers.
The data allegedly stolen during the attack contains the data for around 100 million T-Mobile customers, including IMSI numbers, IMEI numbers, phone numbers, customer names, security PINs, social security numbers, driver's license numbers, and date of birth.
On the underground discussion board, the seller is requesting 6 bitcoin, spherical $270,000, for a subset of the knowledge containing 30 million social safety numbers and driver licenses. The seller said they are privately selling the remainder of the knowledge for the time being.
In the reported attack, T-Mobile has confirmed that some of their servers had been hacked within the attack and are persevering with to examine if customer files become accessed.
Primarily based completely on this arena, the stolen databases and servers accessed by the attackers illustrate that the threat actors downloaded customer files for the length of the cyberattack.
Attributable to this truth, via this attack, the attackers can switch a mobile phone number to their have gadgets to receive password reset and multi-component authentication requests that would moreover let them breach loads of accounts belonging to a customer.
Hence all T-Mobile potentialities desires to possess a examine out about suspicious emails or SMS texts pretending to be from T-Mobile. The potentialities are steered no longer to click on any links embedded within the messages as threat actors.
That you just may possibly moreover apply us on Linkedin, Twitter, Facebook for every day Cybersecurity and hacking news updates.
Source credit : cybersecuritynews.com