{"id":7481,"date":"2018-08-27T10:04:42","date_gmt":"2018-08-27T17:04:42","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=7481"},"modified":"2019-04-20T16:24:10","modified_gmt":"2019-04-20T16:24:10","slug":"t-mobile-2m-users-affected-by-exposure","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=7481","title":{"rendered":"T-Mobile 2M users affected by exposure"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[\n\n<p>T-Mobile has <a href=\"https:\/\/www.t-mobile.com\/customers\/6305378821?cmpid=WMM_EM_Q318SECURI_W5XQI6NMW4M43707\">announced<\/a> to its customers that on August 20, their cyber security team discovered and shut down an unauthorized access.&nbsp; The information exposed may have included names, billing zip codes, email addresses, phone numbers and account types (prepaid or postpaid.)&nbsp; A T-Mobile spokesperson indicated about 3% of the company&#39;s 77 million users were affected by the unauthorized access.&nbsp; This equates to approximately 2 million users.<\/p>\n\n\n\n\n<p>T-Mobile customers can dial 611 to contact customer care for more information.&nbsp; While the announcement indicates passwords were not compromised it is good practice to regularly change them.<\/p>\n\n\n\n\n<p>A security weakness was <a href=\"https:\/\/www.zdnet.com\/article\/tmobile-bug-let-anyone-see-any-customers-account-details\/\" target=\"_blank\" rel=\"noopener noreferrer\">discovered<\/a> last May which allowed customer data to be accessed on a T-Mobile subdomain used by staff without the necessity for a password.&nbsp; Prior to that, another <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/wjx3e4\/t-mobile-website-allowed-hackers-to-access-your-account-data-with-just-your-phone-number\" target=\"_blank\" rel=\"noopener noreferrer\">vulnerability<\/a>&nbsp;had been discovered which exposed customers&#39; email addresses, IMSI numbers, and billing accounts.<\/p>\n\n\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[66,67,65],"tags":[],"class_list":["post-7481","post","type-post","status-publish","format-standard","hentry","category-breaches","category-practices","category-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7481"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7481\/revisions"}],"predecessor-version":[{"id":7815,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7481\/revisions\/7815"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}