T-Mobile Says Vendor Employee Improperly Accessed One Customer Account
Summary
T-Mobile says a vendor employee improperly accessed information tied to one customer account. The exposed data included personal and account details; the company said no credentials were compromised and reset the account PIN.
Key points
- T-Mobile told SecurityWeek the incident involved one customer account and a vendor employee who improperly accessed the information.
- The Maine breach notice listed the exposed information as including the customer's name, contact details, account number and PIN, date of birth, driver's license number, and SSN.
- T-Mobile said no credentials were compromised, and that financial account information and call records were not affected.
- The affected customer's account PIN was reset as a precaution.
- T-Mobile said it notified authorities and law enforcement and contacted the affected customer directly.
Article Details
- Victim Organization
- T-Mobile USA
- Incident Type
- Insider incident involving unauthorized access to customer information by a vendor employee
- Data Types Exposed
- Full name
- Email address
- Physical address
- Account number
- Associated phone number
- T-Mobile account PIN
- Date of birth
- Driver's license number
- Social Security number
- Affected Records
- 1 individual
- Operational Impact
- T-Mobile said one customer account was affected. The customer’s account PIN was reset as a precaution. Personal financial account information and call records were not impacted.
- Claim Status
- confirmed