Security News > 2020 > December > T-Mobile data breach exposed phone numbers, call records

T-Mobile has announced a data breach exposing customers' proprietary network information, including phone numbers and call records.

After bringing in a cybersecurity firm to perform an investigation, T-Mobile found that threat actors gained access to the telecommunications information generated by customers, known as CPNI. The information exposed in this breach includes phone numbers, call records, and the number of lines on an account.

"Customer proprietary network information as defined by the Federal Communications Commission rules was accessed. The CPNI accessed may have included phone number, number of lines subscribed to on your account and, in some cases, call-related information collected as part of the normal operation of your wireless service," T-Mobile stated in a data breach notification.

"We are currently notifying a small number of customers that some information related to their account may have been illegally accessed. The data accessed did NOT include any names associated with the account, financial data, credit card information, social security numbers, passwords, PINs or physical or email addresses. The information that was accessed may have included phone numbers, number of lines subscribed to and in a small number of cases some call-related information collected as part of normal operation and service," T-Mobile told BleepingComputer.

T-Mobile previously suffered from breaches in 2018 that exposed customers' information, 2019 for prepaid customers, and in March 2020 that exposed customer and financial data.

News URL

https://www.bleepingcomputer.com/news/security/t-mobile-data-breach-exposed-phone-numbers-call-records/