T-Mobile Suffers Another Data Breach

"T-Mobile had another data breach," writes Slashdot reader motang. "This comes after the massive breach that affected millions of users this past summer." According to Android Police, a small number of accounts had their data viewed by an unknown individual -- including names, addresses, phone numbers, plan rates, and number of lines -- or fell victim to an unauthorized SIM swap, with a third subset of users facing both. From the report: For its part, the company has contacted individuals who were targeted in this breach, alerting them to specify what was or wasn't viewed and highlighting that this hacker stole no payment or password data to its knowledge. However, T-Mobile has yet to report any specifics about how many customers were directly affected. [...] It seems possible that this is another example of poor security practices, though we'll have to wait until T-Mobile delivers more information. The T-Mo Report was first to report the data breach.

Security continues to be underinvested in

[JRZO]

A great reason for the average cellphone based 2FA user to move to more secure methods if possible.

I guess changing the password didn't work...

[VeryFluffyBunny]

Changing the root password from 123456 to 123457 didn't work then. Back to the drawing board!

Given their track record, I assume it's even worse

[Required Snark]

In the last three (or is it four) years they have had one major data breach per year. They have proven they are incompetent and untrustworthy. Why should anyone believe what they say at this point? Do they really know how many people were impacted in the first place? Are they trying to hide how bad it is because of their ongoing failures? Hard to say.

As far as anyone knows, there has been no negative consequence for the organization or any individual in a position of responsibility. Neither the FCC or the FTC has done squat. Same goes for regulators at the state level. Investors don't care as long as the stock does well, and the board of directors continues to get big fat payouts for doing basically nothing. The C-suite types are completely immune from any impact. Their perks and obscene compensation continue serenely on without the slightest ripple.

This is the norm for corrupt corporate America. No matter how badly or how long they screw up they never pay any price. As long as there is no accountability nothing will change.

Re:

[King_TJ]

Everyone wants to get indignant about these breaches and act like it's a world-ending crisis level of an issue. If you follow this stuff closely enough though, you see SO many data breaches everywhere, it gets to the point where you resign yourself to knowing that the info you provide to any corporate entity is liable to leak out sooner or later. (I think at least one statistic showed that pretty much every credit card issued is already hacked. Someone or other has a collection of card data with any given o

Semiannual data breaches

[arosenfield]

They're just increasing the pace of their data breaches from an annual release cycle to a semiannual release cycle. Pretty soon it'll be the new Patch Tuesday!
* Aug 2021 [slashdot.org]
* Dec 2020 [slashdot.org]
* Nov 2019 [slashdot.org]
* Aug 2018 [slashdot.org]
* Oct 2017 [slashdot.org]