The company said that stolen files included the personal information of 7.8 million current customers and 40 million people who had applied for credit.
A cyberattack on T-Mobile exposed the information of more than 40 million people, with stolen files including names, birthdays and social security numbers, the company said on Tuesday. The mobile service provider said in a statement that it had been investigating the data breach since last week, when it was “informed of claims made in an online forum that a bad actor had compromised T-Mobile systems.” The company said the stolen files included information from approximately 7.8 million current T-Mobile accounts, as well as records of more than 40 million former or prospective customers who had applied for credit with the company. Some of the exposed data included customers’ first and last names, social security numbers, driver’s license and other information, T-Mobile said. It also included the PINs of about 850,000 active prepaid customers, leading the company to reset some account information. T-Mobile said that no phone numbers, account numbers or passwords were compromised for current or prospective customers, and that there was no indication that financial, credit card or other payment information had been stolen. The company said it had “immediately closed” the access point in its computer system that it believed was targeted by the cyberattack.
