SoylentNews

An Anonymous Coward writes:

https://www.theverge.com/2018/8/24/17776836/tmobile-hack-data-breach-personal-information-two-million-customers:

T-Mobile was hit by a data breach affecting around 2 million customers

T-Mobile has announced that on August 20th, the company was hit by hackers who were able to gain access to personal information from roughly 2 million customers, including the name, billing zip code, phone number, email address, account number, and account type of users. According to the company, more sensitive information — financial data, Social Security numbers, and passwords — weren't compromised in the hack.

https://www.t-mobile.com/customers/6305378821:

Dear Customer –

Out of an abundance of caution, we wanted to let you know about an incident that we recently handled that may have impacted some of your personal information.

On August 20, our cyber-security team discovered and shut down an unauthorized access to certain information, including yours, and we promptly reported it to authorities. None of your financial data (including credit card information) or social security numbers were involved, and no passwords were compromised. However, you should know that some of your personal information may have been exposed, which may have included one or more of the following: name, billing zip code, phone number, email address, account number and account type (prepaid or postpaid).

If you have questions about this incident or your account, please contact Customer Care at your convenience. If you are a T-Mobile customer, you can dial 611, use two-way messaging on MyT-Mobile.com, the T-Mobile App, or iMessage through Apple Business Chat. You can also request a call back or schedule a time for your Team of Experts to call you through both the T-Mobile App and MyT-Mobile.com. If you are a T-Mobile For Business or Metro PCS customer, just dial 611 from your mobile phone.

We take the security of your information very seriously and have a number of safeguards in place to protect your personal information from unauthorized access. We truly regret that this incident occurred and are so sorry for any inconvenience this has caused you.

https://old.reddit.com/r/tmobile/comments/99st4y/tmobile_data_breach_megathread/:

On August 20th, 2018, T-Mobile security teams identified and shut down an unauthorized capture of certain customer personal information and reported it to authorities. If you received a text saying you were affected, we highly recommend that you change your password!

• NO financial data (Credit Cards, Bank info, SSNs) were involved.
• Impacted customers will receive an SMS, letter in the mail, or a phone call to notify them.
• Personal data involved may include:
  • Name
  • Billing Zip Code
  • Phone Number
  • Email Address
  • Account Number
  • Account Type (Prepaid/Postpaid)
  • NEW (8/24/18): Encrypted Passwords (Per a T-Mobile spokesperson here)

Original Submission