Undisclosed number of T-Mobile customers impacted in data breach

Share this article:

An undisclosed number of T-Mobile customers may have had personal information compromised after an unauthorized party gained access to a file stored on servers that are owned and managed by a T-Mobile supplier.

How many victims? Undisclosed. 

What type of personal information? Names, addresses, Social Security numbers and driver's license numbers.

What happened? An unauthorized party compromised T-Mobile customer data after gaining access to a file that contained the information. The file was stored on servers that are owned and managed by a T-Mobile supplier.

What was the response? The supplier has taken measures to secure the impacted servers. T-Mobile is notifying all impacted customers and is offering them one full year of credit monitoring services and identity theft protection.

Details: T-Mobile learned of the incident on Nov. 26, 2013, according to the California data breach notification website. The incident was reported to the California data breach notification website on Dec. 30, 2013.  

Quote: “Although we believe the primary goal of the access was to obtain credit card numbers (which were not included in the file), the information that was accessible could also potentially be misused,” according to the notification letter.

Source: oag.ca.gov, “Customer notice for T-Mobile security incident,” Dec. 30, 2013.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

RECENT COMMENTS

FOLLOW US

More in The Data Breach Blog

Transcript website flaw exposed personal data on 98k users

NeedMyTranscripts.com expose users' names, addresses and dates of birth, among other information, due to a site flaw that one user discovered.

Sourcebooks payment card breach impacts more than 5,000 customers

More than 5,000 customers had personal information stolen, but roughly 9,000 notification letters were sent out as a precautionary measure.

Cyberswim notifies customers that payment card data may be at risk

Malicious software installed on Sept. 24 may have compromised personal information for visitors that made purchases between May 12 and Aug. 28.