T-Mobile Says Hackers Accessed Personal Data of 37 Million Customers

Lizzy Buczak
·2 min read

Here's what that could mean for you.

T-Mobile is informing customers that a hacker has accessed data belonging to 37 million customers.

The company said the data in the breach includes addresses, phone numbers, and birth dates, along with T-Mobile account numbers and information describing a customer’s services with the wireless carrier.

The carrier emphasized that the data exposed did not include passwords or PINs, bank account or credit card information, Social Security numbers or other government IDs.

However, CNN noted that the information that was exploited can still be taken advantage of and “compiled with other stolen or publicly available information” to be used by scammers to steal people’s identities or money.

During a filing with the U.S. Securities and Exchange Commission on Thursday, T-Mobile said the malicious intruder breached the wireless network back in November, though it was discovered Jan. 5.

"Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time," T-Mobile stated. It added that T-Mobile’s systems and network do not appear to have been hacked.

The carrier explained that it is working with law enforcement and has begun notifying customers whose information may have been leaked in the breach.

It also said that it hired an external cybersecurity firm to investigate, per the outlet.

“Protecting our customers’ data remains a top priority,” T-Mobile explained, adding, “We will continue to make substantial investments to strengthen our cybersecurity program,” which was launched in 2021. T-Mobile noted it would spend $150 million through 2023 on improving and strengthening data security.

CBS reports that T-Mobile has been hacked multiple times in recent years, including January 2021, November 2019, and August 2018.

In July, the company agreed to pay $350 million to customers who filed a class action lawsuit after a breach in August 2021 led to theft of personal data from nearly 80 million customers, including Social Security numbers and driver's license information.