US telecommunications giant T-Mobile is investigating a suspected large-scale data breach that may have damaged more than 100 million users.
According to Vice’s motherboard, T-Mobile is investigating the alleged data breach claimed by the author of the post on an underground forum. August 15 Report The hacker claimed to have obtained the data of more than 100 million customers from the T-Mobile server.
The seller asked for 6 BTC-approximately $287,000 at the current price, in exchange for some data.
The motherboard has seen data samples, which include social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driving license information.
The seller told the media that they are currently selling most of the data privately, but will hand over some of the data, which contains 30 million social security numbers and a BTC ransom driver’s license.
Speaking of T-Mobile’s alert and potential response to the violation, the hacker said: “I think they have found out because we can’t access the backdoor server.”
A T-Mobile spokesperson stated that the company “knows about the statement made on the underground forum” and “is actively investigating its validity”, adding: “We currently do not have any other information to share.”
This is not the first time T-Mobile has become the center of a cybersecurity scandal. In February, the mobile operator was sued by a victim who lost $450,000 in Bitcoin in a SIM swap attack.
When the victim’s mobile phone number is stolen, a SIM swap attack occurs. The victim’s online financial and social media accounts can then be hijacked by intercepting automatic messages or phone calls used for two-factor authentication security measures.
In this case, the victim Calvin Cheng Accuses T-Mobile of failing to implement adequate security policies To prevent unauthorized access to their customers’ accounts.
T-Mobile too Sued by the CEO of a crypto company in July 2020 A series of SIM exchanges resulted in the loss of digital assets worth US$8.7 million.
In April of this year, hardware wallet manufacturers, Ledger faces class action lawsuit Regarding a major data breach in which the personal data of 270,000 customers were stolen from April to June 2020.