While the number of “impacted customers” T-Mo is “currently in the process of informing” about this breach remains unknown, by far the best news delivered today is that “no passwords, payment card information, social security numbers, government ID numbers, or other financial account information” appears to have been compromised… this time around.
On the not so bright side of things, “some basic customer information” was breached, and as hard as Magenta might try to minimize the importance of keeping stuff like names, billing addresses, emails, phone numbers, birthdates, account numbers, the number of lines on an account, and service plan features private, it’s totally not cool to know that someone gained access to all of that without your approval.
There’s obviously no need to change any passwords or take any special security measures if you’re notified of a breach on your account, at least if T-Mobile doesn’t discover anything new and radically different in the near future.
For the time being, the nation’s second-largest wireless service provider seems pretty confident that the “issue” was permanently “shut down” and all of the danger removed “within 24 hours” of initially identifying the breach, caused by a single API (Application Programming Interface) deployed by an unnamed “bad actor.”
