BrianKrebsJan 20, 2023

T-Mobile says its customer records have been pillaged yet again. In a filing with the SEC, T-Mobile said it learned on Jan 5 that a "bad actor" abused an API to harvest names, billing addresses, phone numbers emails, dates of birth and T-Mobile account numbers on 37 million current postpaid and prepaid customers.

Perfect timing, too. There are only a few more days left for T-Mobile customers to claim their $25 or possibly more for T-Mobile's settlement from the breach last August, when they exposed similar data on at least 40 million current and former customers.

And to think this data was exposed despite T-Mobile saying as part of its settlement from last year's breach that they were going to invest $150 million into their own security infrastructure.

https://www.sec.gov/ix?doc=/Archives/edgar/data/0001283699/000119312523010949/d641142d8k.htm

https://www.cnet.com/tech/mobile/another-data-breach-has-hit-t-mobile-impacting-37-million-accounts/

Inline XBRL Viewer

Show threadBrianKrebsJan 20, 2023
T-Mobile: We'll never raise the price of your existing contract, but we'll continue leaking your data for as long as you're a customer, and then some.
Show threadBrianKrebsJan 20, 2023

Okay, I should have led with this, from their 8k. My translation follows.

"As we have previously disclosed, in 2021, we commenced a substantial multi-year investment working with leading external cybersecurity experts to enhance our cybersecurity capabilities and transform our approach to cybersecurity. We have made substantial progress to date, and protecting our customers’ data remains a top priority. We will continue to make substantial investments to strengthen our cybersecurity program."

Didn't we say this was going to take a long time? Sheesh.

"We may incur significant expenses in connection with this incident."

We might have to pay some small percentage of customers who go through all the trouble of filing a claim to claim a measly few bucks. But in no way will this figure come close to a significant fraction of what we earn in a quarter.

"Although we are unable to predict the full impact of this incident on customer behavior in the future, including whether a change in our customers’ behavior could negatively impact our results of operations on an ongoing basis, we presently do not expect that it will have a material effect on the Company’s operations."

This is probably the only true statement in the 8k.

Show threadBrianKrebsJan 20, 2023
Just FYI, T-Mobile made about $20 billion in the most recent quarter. Or, as one British investor site put it, $19701 million.
Show threadBrianKrebsJan 20, 2023

..aaaaand here's my take on it.

https://krebsonsecurity.com/2023/01/new-t-mobile-breach-affects-37-million-accounts/

Thank you @hackdefendr for the excellent image.

New T-Mobile Breach Affects 37 Million Accounts – Krebs on Security

Show threadApicultor 🐝Jan 20, 2023

@briankrebs @hackdefendr >The company said it first learned of the incident on Jan. 5, 2022, and that an investigation determined the bad actor started abusing the API beginning around Nov. 25, 2022.

Do you mean Jan 5 2023?

Show threadBrianKrebs
@apicultor @hackdefendr yes typo thanks
Jan 20, 2023 at 1:22pmWeb