X

T-Mobile confirms breach but still investigating if personal data was stolen

More than 100 million people are reportedly affected.

Steven Musil Night Editor / News
Steven Musil is the night news editor at CNET News. He's been hooked on tech since learning BASIC in the late '70s. When not cleaning up after his daughter and son, Steven can be found pedaling around the San Francisco Bay Area. Before joining CNET in 2000, Steven spent 10 years at various Bay Area newspapers.
Expertise I have more than 30 years' experience in journalism in the heart of the Silicon Valley.
Shelby Brown Editor II
Shelby Brown (she/her/hers) is an editor for CNET's services team. She covers tips and tricks for apps, operating systems and devices, as well as mobile gaming and Apple Arcade news. Shelby also oversees Tech Tips coverage. Before joining CNET, she covered app news for Download.com and served as a freelancer for Louisville.com.
Credentials
  • She received the Renau Writing Scholarship in 2016 from the University of Louisville's communication department.
Steven Musil
Shelby Brown
008-t-mobile-network-mobile-carrier-logo-2021

T-Mobile is looking into a claim that data stolen from its servers is being sold online.

Sarah Tew/CNET

T-Mobile confirmed on Monday that some of its data may have been illegally accessed. The mobile carrier is still investigating a post on a forum that claimed to be selling the personal data of more than 100 million people swiped from T-Mobile's servers. (Here are some steps you can take to protect your data right now.)

"We have not yet determined that there is any personal customer data involved," T-Mobile said in a release. "We are confident that the entry point used to gain access has been closed, and we are continuing our deep technical review of the situation across our systems to identify the nature of any data that was illegally accessed."

The data breach included information such as Social Security numbers, phone numbers, names, physical addresses and driver's license information, according to Vice, which reported the security breach claim earlier on Sunday. The forum post doesn't mention T-Mobile by name, but the seller told Vice's Motherboard that the data came from T-Mobile servers.

The seller is requesting 6 Bitcoin (about $277,000) for a subset of the data containing 30 million Social Security numbers and driver's licenses, while the rest of the data is being sold privately, according to the Vice report.