T-Mobile has once again found itself embroiled in a data breach, the third such incident this year alone. Multiple customers reported seeing the sensitive information of other users when logging into their accounts.
This latest breach adds to a growing list of security incidents plaguing the mobile carrier, raising serious questions about its cybersecurity practices.
Table of Contents
Recent T-Mobile Data Breach
Customer Data Breach
On September 20, 2023, several T-Mobile customers reported seeing other customers’ personal information displayed on their T-Mobile app. This exposed information included names, addresses, credit card information, and purchase history.
The company acknowledged the incident and attributed it to a temporary system glitch related to a planned overnight technology update.
T-Mobile stated that the issue was quickly resolved and that fewer than 100 customers were affected. However, the company did not disclose how many people had access to the exposed information.
Employee Data Breach
On September 22, 2023, vx underground, a website that collects malware source code and samples, posted allegations that T-Mobile had suffered a data breach in April 2023.
The breach reportedly involved the theft of 90GB of employee data, including full names, job titles, social security numbers, and email addresses.
The company initially denied the claims, stating that there was no data breach at the corporate level. However, the company later clarified that the breach had actually occurred at an independently owned T-Mobile franchise, Connectivity Source.
According to T-Mobile, the breach impacted 17,835 past and present employees and was disclosed in court on May 10, 2023.
Impact on Customers
The latest breach underscores the significant risks associated with data leaks. Exposed personal information like credit card details and home addresses can be exploited for identity theft, financial fraud, and other malicious purposes.
This can have a devastating impact on affected individuals, causing financial losses, emotional distress, and long-term damage to their creditworthiness.
T-Mobile’s Response & Following steps
In response to the glitch, T-Mobile released a statement claiming the issue was “quickly resolved” and that “there was no cyberattack or breach.” However, this statement has done little to quell customer concerns, especially given the company’s recent history of data breaches.
However, many users and security experts remain skeptical of the company’s ability to safeguard data. This is the eighth data breach reported by T-Mobile since 2018, raising serious questions about their cybersecurity practices and commitment to customer privacy.
Questions Remain
T-Mobile has provided limited information about the latest glitch, leaving customers with several unanswered questions. These include:
- The exact number of customers affected.
- The specific types of personal information exposed.
- The steps T-Mobile is taking to prevent similar incidents in the future.
- What resources are available to affected customers.
T-Mobile Data Breaches with Timeline
Here is a timeline of the data breaches reported in recent years:
- November 2009: Millions of T-Mobile Customer Records Stolen and Sold to Rival Companies.
- October 2015: Data on 15 Million T-Mobile Subscribers Stolen from Experian.
- October 2017: Website Bug Exposes Customer Data
- August 2018: 2 million prepaid customers were affected due to stolen data.
- March 2020: The company employees’ personal and financial information was exposed.
- December 2020: Customer proprietary network information, including phone numbers and call records, was compromised.
- February 2021: Unknown attackers gained access to an internal T-Mobile application.
- August 2021: Hackers accessed the carrier’s network through a vulnerability in a testing environment.
- April 2022: The Lapsus$ extortion group breached T-Mobile’s network using stolen credentials.
- January 2023: The personal information of 37 million customers was stolen through a vulnerable API.
- March 2023: This latest breach impacting 836 customers.
- September 2023: Data of 100 customers’ personal information displayed on their T-Mobile app.
T-Mobile Settlement & Claim Process
The settlement provides several options for eligible individuals:
1. File a Claim for Out-of-Pocket Losses or Lost Time:
You can submit claims for documented financial losses or time spent resolving issues due to the data breach. The maximum payout for out-of-pocket losses is $25,000, and the maximum for lost time is $25 per hour, capped at 10 hours.
2. Claim an Alternative Cash Payment:
If you prefer not to submit documentation, you can opt for a flat cash payment of $25.
3. Receive Free Identity Defense Services:
The settlement offers two years of free identity theft protection services from McAfee to help monitor your credit and personal information.
4. Access Restoration Services:
Whether you choose to file a claim or not, you are eligible to access restoration services, including credit monitoring, identity theft restoration assistance, and fraud consultation. These services will be available for two years after the settlement becomes final.
5. Exclude Yourself from the Settlement:
If you wish to retain your right to sue the company individually, you can opt-out of the settlement. However, opting out means you’ll forfeit all benefits under the settlement.
6. Object to the Settlement:
You can object to the settlement if you disagree with its terms. However, objecting doesn’t guarantee you’ll be exempt from the settlement’s final decision.
What are the Deadlines?
The deadline to submit:
- Exclusion request: December 8, 2022
- Objection: December 8, 2022
- Claims for out-of-pocket losses or lost time, or for an alternative cash payment: January 23, 2023
- Claims for identity defense services: January 23, 2023
How to File a Claim:
Visit the official T-Mobile Data Breach Settlement website at https://www.t-mobilesettlement.com/ for detailed instructions and claim forms. You can also call the Settlement Administrator at 1-833-512-2314 for assistance.
Important Dates:
- Exclusion deadline: December 8, 2022
- Objection deadline: December 8, 2022
- Claims deadline: January 23, 2023
- Final approval hearing: January 20, 2023
By understanding your options and taking action, you can protect your rights and benefit from the resources available under the T-Mobile Data Breach Settlement.
