X

T-Mobile confirms breach but still investigating if personal data was stolen

More than 100 million people are reportedly affected.

Steven_Musil2.jpg
shelbybown
Steven Musil Shelby Brown
Steven_Musil2.jpg
Steven Musil Night Editor / News
Steven Musil is the night news editor at CNET News. He's been hooked on tech since learning BASIC in the late '70s. When not cleaning up after his daughter and son, Steven can be found pedaling around the San Francisco Bay Area. Before joining CNET in 2000, Steven spent 10 years at various Bay Area newspapers.
Expertise I have more than 30 years' experience in journalism in the heart of the Silicon Valley.
shelbybown
Shelby Brown Staff Writer
Shelby Brown (she/her/hers) is a writer for CNET's services and software team. She covers tips and tricks for apps, operating systems and devices, as well as mobile gaming and Apple Arcade news. Shelby oversees Tech Tips coverage and curates the CNET Now daily newsletter. Before joining CNET, she covered app news for Download.com and served as a freelancer for Louisville.com.
Credentials She received the Renau Writing Scholarship in 2016 from the University of Louisville's communication department.
008-t-mobile-network-mobile-carrier-logo-2021

T-Mobile is looking into a claim that data stolen from its servers is being sold online.

Sarah Tew/CNET

T-Mobile confirmed on Monday that some of its data may have been illegally accessed. The mobile carrier is still investigating a post on a forum that claimed to be selling the personal data of more than 100 million people swiped from T-Mobile's servers. (Here are some steps you can take to protect your data right now.)

"We have not yet determined that there is any personal customer data involved," T-Mobile said in a release. "We are confident that the entry point used to gain access has been closed, and we are continuing our deep technical review of the situation across our systems to identify the nature of any data that was illegally accessed."

The data breach included information such as Social Security numbers, phone numbers, names, physical addresses and driver's license information, according to Vice, which reported the security breach claim earlier on Sunday. The forum post doesn't mention T-Mobile by name, but the seller told Vice's Motherboard that the data came from T-Mobile servers.

The seller is requesting 6 Bitcoin (about $277,000) for a subset of the data containing 30 million Social Security numbers and driver's licenses, while the rest of the data is being sold privately, according to the Vice report.