T-Mobile hacked, data of 37 million customers stolen

BOSTON — U.S. wireless carrier T-Mobile said Thursday that an unidentified attacker broke into its network in late November and stole data on 37 million customers, including addresses, phone numbers and dates of birth.

T-Mobile said in a filing with the Security and Exchange Commission that the breach was discovered on January 5. The company said the data exposed in the theft — based on the investigation to date — did not include passwords or PINs, bank account or credit card information, Social Security numbers or other government IDs.

“Our investigation is still ongoing, but the malicious activity appears to be completely contained at this time,” T-Mobile said, with no evidence that an attacker was able to breach the company’s network. The company did not immediately respond to an email seeking comment.

T-Mobile said it notified law enforcement and federal agencies it did not name. The company said it does not expect the incident to significantly affect its operations. It says the first access to the data was obtained on or around November 25 of this year.

T-Mobile has been hacked before. In July, she agreed to pay $350 million to customers who filed a class action lawsuit after the company disclosed in August 2021 that personal data, including Social Security numbers and driver’s license information, had been stolen. Almost 80 million US residents were affected.

At the time, he also said he would spend $150 million through 2023 to strengthen data security and other technologies.

Prior to the August 2021 breach, the company had disclosed breaches in January 2021, November 2019 and August 2018, during which customer information was accessed.

Based in Bellevue, Washington, T-Mobile was one of the largest mobile carriers in the country in 2020 after buying rival Sprint in 2020. He reported that there were more than 102 million customers after the merger.