In the second intrusion of 2023 and the ninth since 2018, T-Mobile was hacked, affecting 836 subscribers. It took more than a month for the company to discover the breach. The hack exposed:
- account PINs
- full names
- contact info
- account and phone numbers
- Social Security numbers
- government ID
- date of birth
- account balances
- T-Mobile internal codes
Last November, the company reached a $2.5 million settlement for a 2015 data breach. A 2021 data leak cost the carrier $500 million: $350 million in payouts to affected customers and another $150 million pledged to upgrade security through 2023.
The intrusion began on February 24 and lasted until March 30. The company sent a letter regarding the hack to affected customers. Account PINs, which customers use to swap out SIM cards and authorize other important changes to their accounts, were reset once T-Mobile discovered the breach on March 27.