T-Mobile confirms 1 million hit by data breach

Cellular phone provider T-Mobile on Monday is confirming earlier reports of a data breach, and says the breach affected over a million of its customers.

Here's the disclosure to affected users.

More than one million T-Mobile customers' personal data were exposed to a malicious actor, but no financial or password data.

TechCrunch:

The data exposed appears to have been:

Name Billing address Phone number Account number Rate, plan and calling features (such as paying for international calls)

The latter data is considered customer proprietary network information and under telecoms regulations they are required to notify customers if it is leaked. The implication seems to be that they might not have done so otherwise. Of course some hacks, even hacks of historic magnitude, go undisclosed sometimes for years.

In this case, however, it seems that T-Mobile has disclosed the hack in a fairly prompt manner, though it provided very few details. When I asked, a T-Mobile representative indicated that less than 1.5 percent of customers were affected, which of the companys approximately 75 million users adds up to somewhat over a million.

Previously on Boing Boing:

T-Mobile says recent 'criminal hack' got personal data of some prepaid wireless customers Read the rest