T-Mobile, the largest wireless carrier in the United
States, is investigating an alleged huge data breach that may have affected
more than 100 million customers.
T-Mobile is investigating an alleged data breach
claimed by the author of the post on an underground site, according to Vice's
Motherboard. According to the article, the hacker claims to have gotten data on over 100 million T-Mobile
users from T-Mobile servers.
In return for part of the data, the vendor is asking
for 6 bitcoins (about $287,000 at current rates).
Social security numbers, phone numbers, names, physical
locations, unique IMEI numbers, and driving license information are among the
data samples reviewed by Motherboard.
The vendor informed the source that they are currently
selling the majority of the data privately, but that in exchange for the BTC
ransom, they would give over a portion of the data including 30 million social
security numbers and driver licenses.
“I believe they have found out since we lost access to the backdoored servers,” the hacker added, referring to T-warning Mobile's and possible reaction to the attack.
The firm is "aware of allegations made in an underground forum" and is "currently examining their veracity," according to a T-Mobile spokesman, who added, "We do not have any further information to offer at this time."
T-Mobile isn't the first company to be involved in a
cyber-security issue. A victim of a SIM-swap hack who lost $450,000 in Bitcoin
sued the cell provider in February.
When a victim's mobile phone number is taken, a
SIM-swap assault happens. This may then be used to get access to the victim's
online banking and social media accounts by intercepting two-factor authentication
security messages or phone calls.
Calvin Cheng, the victim in this lawsuit, accused
T-Mobile of failing to establish sufficient security measures to protect its
customers' accounts from unauthorized access.
In July 2020, T-Mobile was sued by the CEO of a
cryptocurrency company for a series of SIM swaps that resulted in the loss of
$8.7 million in digital assets.
Ledger, a hardware wallet maker, was hit with a class-action lawsuit in April this year after a massive data breach that saw the personal information of 270,000 users taken between April and June 2020.
0 Comments