Hackers Stole Personal Data of 2 Million T-Mobile Customers (vice.com) 56
On late Thursday, T-Mobile revealed that hackers stole some of the personal data of 2 million people in a new data breach. From a report: In a brief intrusion, hackers stole "some" customer data including names, email addresses, account numbers, and other billing information. The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company. In its announcement, T-Mobile said that its cybersecurity team detected an "unauthorized capture of some information" on Monday, Aug. 20. A company spokesperson told me that the breach affected "about" or "slightly less than" 3% of its 77 million customers.
Is it "malicious hackers stole data of millions"? (Score:5, Interesting)
Or is it "reckless company did not protect the data of millions"?
About time the blame is shared, no?
Re: (Score:1)
Re: (Score:1)
It is time, but I fear that many lawmakers (especially in the US) will never do anything which makes corporations actually liable for such things.
Maybe do the Yakuza thing with the CIO ... you get hacked, you lose a digit. Never hire a CIO missing a digit.
Far too many companies have far too lax security,and it really is time to make them bear the responsibility for it.
Re: Is it "malicious hackers stole data of million (Score:3, Funny)
Catherine Zeta-Jones would say that this is, wait for it, wait for it...
Entrapment.
I'll show myself out now.
Re: (Score:1)
I would have been gladly entraped by her... 30 years ago.
Re: (Score:2)
T-mobile wasn't "dressed provocatively", they just didn't want to pay for security. But congrats on the nice false equivalence.
Re: (Score:1)
If this was an "absolutely proper equivalence", your car insurance company would gladly pay for your stolen car which you left in a bad neighborhood with the keys in the ignition. However, they do not. Are they "blaming the victim" too? No, just like in the case above, when a party shirks the responsibilities that are expected of them (lock the car, keep the keys, secure their service), they are partly liable.
Re: (Score:1)
Re: (Score:1)
+1, wrote almost the same thing above.
/ shaking a tiny fist.
Re: (Score:2)
Well the fact that they had social security numbers and credit card numbers secured differently says they they did more than the past companies that got hacked.
Maybe they will pay my bill (Score:2)
Filing a Mmissing-data report. (Score:1)
"Hackers Stole Personal Data of 2 Million T-Mobile Customers "
*checks servers*
I'm happy to report the data has been located, and returned to it's owners.
Re: (Score:1)
Re: (Score:2)
Does T-Mobile even have customers' social security numbers? Why??
I don't know if it is still their policy, but they used to ask for your SSN as a form of ID. A lot of people raised a stink over this, but I don't know that anything ever changed.
hmm (Score:3)
"some" customer data including names, email addresses, account numbers, and other billing information.
Maybe I'm just jaded, but judging by the catalogs I got in the mail, shoe companies (for example) that I'd never shopped at had at least this much information about me. In the nineties.
(OK, in all seriousness, yeah, possible social engineering attacks and all that. Though I must point out, even I don't know my account number ... )
Re: (Score:2)
Oh what good news... (Score:2)
The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company
Way to spin a disaster... oh yeah, we got hacked... but they didn't get your Credit Card Number... BUT GOOD NEWS EVERYONE they just everything they need to know to sign you up for fake Credit Cards and otherwise fake your identity.
Re: (Score:2)
The good news is that they did not get credit card numbers, social security numbers, or passwords, according to the company
Way to spin a disaster... oh yeah, we got hacked... but they didn't get your Credit Card Number... BUT GOOD NEWS EVERYONE they just everything they need to know to sign you up for fake Credit Cards and otherwise fake your identity.
Not to defend them, but is there anyone on earth who doesn't know your name and address? Even junk mailers do.
Re: (Score:2)
Are you saying you don't need a social security number to get a credit card?
Who could have seen it coming? (Score:1)
Wrong headline this is positive news (Score:5, Interesting)
I know its not in good taste to actually read the article, but...
The headline should read "T-Mobile in a break from most large corporation intrusions almost immediately detects and prevents breach in it's early stages protecting 97% of its customer data"
T-Mobile caught the hack the SAME DAY and stopped it at 3%. Then publically reported it 4 days later rather than waiting for their executive board to cash out. Unless more information comes out to the contrary this should be held up as an example of success where a large company finally mostly protects their/your data and honestly reports details quickly.
Re: (Score:2)
this should be held up as an example of success where a large company finally mostly protects their/your data and honestly reports details quickly.
That's a pretty low bar for "success". I personally would reserve the word success for companies that have adequate security measures to prevent customer data from being improperly accessed. If any exist.
Re: (Score:2)
You have to judge things based on the current bar. They stopped a hack and reported it. The only thing the hackers got was public information
Re: (Score:2)
I don't know the details of the hack; whether it was the result of incompetence or just a 'shit happens' situation. But as long as humans are involved, I doubt there will ever be a usable commercial network that can't be hacked. I agree with giving T-Mob credit for their response.
OTOH, I wonder how Experian, a company that has every consumer by the balls, can stay in business after the kind of breach that they had.
Re: (Score:2)
I may not be a 1%-er (Score:2)
But now at least I’m a 3%-er... I got a text from T-Mobile last night, saying my info got stolen.
Wanna lay odds that “3%” will be trending strongly upward over the next few days and weeks, and that they’ll eventually have to announce that the intruders got more of each customers’ info than originally thought?
Some strange spoof sms (Score:2)
The from address was spoofed and it appeared exactly as if it came from T Mobile. In fact the t-mobile phone displayed that message along with other legitimate text alerts from T-Mobile.
I knew enough not to click on the link provided, and called T-Mobile. It was not a legitimate message. But they hackers were able to spoof the from address in the SMS. It happened yeste
RUSSIAN hackers? (Score:2)
If not then where's the "news"?