T-Mobile claims the cyberattack affected more customer data than initially thought

Data on millions of additional customers was also compromised, T-Mobile said.

T-Mobile revealed on Friday that the personal data of more than 5 million additional customers were compromised in the recent cyber attack, bringing the total number of people affected to over 50 million.

The company revealed earlier this week that it was the victim of a “highly sophisticated cyberattack” and that data from millions of current and potential customers, including names and social security numbers, had been compromised. The company reiterated on Friday that it has no indication that any of the stolen files include financial information or credit and debit card information.

“We previously reported information from approximately 7.8 million current T-Mobile postpaid customer accounts that included first and last names, date of birth, SSN, and driver’s license / identification information was compromised,” the company said Friday, adding that it also determined the phone numbers and the information IMEI and IMSI (identifying numbers associated with a mobile phone) were also compromised. “In addition, we have since identified another 5.3 million current postpaid customer accounts that had one or more associated customer names, addresses, date of birth, phone numbers, IMEIs, and illegal IMSIs. “.

The company said the additional accounts, however, had no social security number or information on the compromised driver’s license.

“We also previously reported that the data files contain information from nearly 40 million former or potential T-Mobile customers, including first and last names, date of birth, SSN, and driver’s license information. identification, they were committed, ”the company added. “Since then, we’ve identified an additional 667,000 accounts from former T-Mobile customers that were accessed with committed customer names, phone numbers, addresses, and dates of birth.”

Similarly, the company said it did not access social security numbers or driver’s license information for the additional batch of accounts.

The mobile operator said the investigation is still ongoing, but they are confident that the access point used by hackers to access their networks has been closed.

T-Mobile said it provides support to those affected by data breach, offering two years of free identity protection services with McAfee’s identity theft protection service, sharing best practices and security steps which can be done by recommending customers to sign up for a free scam. -block protection.

The company also posted a customer service landing page with more information about data breach.

“While supporting our customers, we have worked diligently to improve security on our platforms and collaborate with industry-leading experts to understand the next immediate and long-term additional steps,” the company said. “We are also committed to transparency, as this research continues and will continue to provide updates if new information is available that affects those affected or causes previous details to change or evolve.”

The massive breach of the mobile operator occurs amid a series of recent high-profile cybersecurity attacks against businesses large and small, causing concern for many that no business is immune.

Following the Colonial Pipeline ransomware attack that forced the closure of a massive East Coast fuel pipeline for several days, President Joe Biden signed an executive order aimed at modernizing the federal government’s response to cyberattacks.

.Source