T-Mobile has suffered yet another customer data breach, as reported earlier Monday by Bleeping Computer. While this is very small — affecting just over 800 people — it follows a massive data breach affecting millions of people in January that raised questions about T-Mobile’s record on cybersecurity.
The latest data breach of the country’s second-largest wireless carrier occurred between February 24 and March 30 and was discovered on March 27. During the hack, 836 people had their names and driver’s license or ID numbers stolen, along with possibly their account PIN, Social Security number, date of birth, outstanding balance and phone plan, among other details. Financial account information and call logs were not hacked.
“We have reported to a small number of customers that our systems and processes have detected and stopped a bad operator who was accessing accounts using compromised credentials,” T-Mobile told CNET in an emailed statement. It added that the company would continue to investigate the breach to “expand the scope of safeguards”.
The hack comes on the heels of T-Mobile in January saying that a “bad actor” took advantage of one of its APIs to obtain data on “approximately 37 million existing postpaid and prepaid customer accounts.”
Another data breach affected in 2021 54 million customers And it led to a massive $500 million class-action settlement announced in January 2022 closed applications for people to get a piece of it.
There were also two breaches in December 2021 and November 2022.