T-Mobile CEO says “truly sorry” for hack of 50M users’ data

Aug 27, 2021, 7:54 AM | Updated: Aug 31, 2021, 9:52 am

BELLEVUE, Wash. (AP) — T-Mobile says it has notified nearly all of the millions of customers whose personal data was stolen and that it is “truly sorry” for the breach.

CEO Mike Sievert said in a written statement Friday that the company spends lots of effort to try to stay ahead of criminal hackers “but we didn’t live up to the expectations we have for ourselves to protect our customers. Knowing that we failed to prevent this exposure is one of the hardest parts of this event.”

The company disclosed earlier in August that the names, Social Security numbers and information from driver’s licenses or other identification of just over 40 million people who applied for T-Mobile credit were exposed in a recent data breach. The same data for about 7.8 million current T-Mobile customers who pay monthly for phone service also appeared to be compromised.

Sievert’s statement follows a Thursday report in the Wall Street Journal in which John Binns, a 21-year-old American hacker living in Turkey, told the newspaper he was responsible for the hack and blamed T-Mobile’s lax security for making it possible.

Binns told the Journal he discovered an unprotected router exposed on the internet in July, and used that entry point to gain access to servers in a T-Mobile data center near East Wenatchee, Washington, a few hours east of the company’s headquarters in the Seattle suburb of Bellevue.

Sievert made no direct reference to Binns on Friday but said that, “in short, this individual’s intent was to break in and steal data, and they succeeded.”

Sievert said the breach has been contained, the investigation is “substantially complete” and that customer financial information wasn’t exposed. He said T-Mobile hired cybersecurity experts from Mandiant to help with the investigation and is coordinating with law enforcement.

“What we can share is that, in simplest terms, the bad actor leveraged their knowledge of technical systems, along with specialized tools and capabilities, to gain access to our testing environments and then used brute force attacks and other methods to make their way into other IT servers that included customer data,” Sievert wrote.

Sievert said the company has notified “just about every” current customer who was affected, and is now doing the same for former customers and prospective customers who might have supplied some personal information in applying for an account. Unaffected customers will see a banner on their T-Mobile online account page letting them know their data was not exposed.

T-Mobile became one of the country’s largest cellphone service carriers, along with AT&T and Verizon, after buying rival Sprint last year. It reported having a total of 102.1 million U.S. customers after the merger.

T-Mobile has previously disclosed a number of data breaches over the years, though the most recent was the largest. Sievert said the company is taking steps to improve its security.

The Federal Communications Commission, which regulates wireless carriers, has said it is investigating the breach.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Associated Press

5 still critical after car drove through fundraiser crowd

BERWICK, Pa. (AP) — State police say five people remain in critical condition after a car drove through a crowd at a weekend fundraiser for victims of a fatal northeastern Pennsylvania fire earlier this month, killing one woman and injuring 17 other people. Adrian Oswaldo Sura Reyes, 24, is charged with homicide in the death […]
12 hours ago
Associated Press

London’s Heathrow Airport extends passenger cap to October

LONDON (AP) — London’s Heathrow Airport said Monday it will extend its cap on daily passenger numbers until the end of October as part of its efforts to cope with soaring demand for air travel amid staffing shortages. The airport, one of Europe’s busiest, said a maximum of 100,000 travelers can depart each day until […]
12 hours ago
U.S. Secretary of Defense Lloyd Austin smiles during the press conference with Minister of Defence ...
Associated Press

Defense secretary Austin positive for COVID for second time

WASHINGTON (AP) — Defense Secretary Lloyd Austin said Monday he has tested positive for COVID-19, is experiencing mild symptoms and will quarantine at home. It’s the second time Austin has gotten the coronavirus. In a statement, Austin, 69, said his is fully vaccinated and has received two boosters. He said he’ll quarantine for the next […]
12 hours ago
People cheer at a watch party in Overland Park, Kansas, after learning that voters rejected a state...
Associated Press

Kansas hasn’t started hand count of vote for abortion rights

TOPEKA, Kan. (AP) — Kansas hasn’t started a statewide hand recount of this month’s decisive vote in favor of abortion rights because the abortion opponents seeking it haven’t shown that they can cover the costs of an effort that wouldn’t change the outcome. The state’s elections director gave a western Kansas woman until 5 p.m. […]
12 hours ago
This combo of images provided by the Kent County, Mich., Jail. shows Barry Croft Jr., left, and Ada...
Associated Press

Jury hears from key informant in Gov. Whitmer kidnap plot

A man charged with conspiring to kidnap Michigan Gov. Gretchen Whitmer was ecstatic and exclaimed, “That’s it!” as he rode past her vacation home in 2020 and told an ally to make a video, according to trial evidence presented Monday. Jurors heard from Dan Chappel, who was known as “Big Dan” to Adam Fox and […]
12 hours ago
Florida Power and Light unveils its new fixed-wing drone designed to fly into tropical storm force ...
Associated Press

Florida utility’s new drone can speed hurricane recovery

WEST PALM BEACH, Fla. (AP) — Florida’s primary energy provider is ready to launch a powerful new technology, just ahead of the busiest weeks of the Atlantic hurricane season: a new fixed-wing drone designed fly into tropical storm force winds and speed the restoration of electricity after severe weather. FPLAir One resembles a small plane […]
12 hours ago

Sponsored Articles

...
Day & Night Air Conditioning, Heating and Plumbing

Ways to prevent clogged drains and what to do if you’re too late

While there are a variety of ways to prevent clogged drains, it's equally as important to know what to do when you're already too late.
...
Mayo Clinic Orthopedics and Sports Medicine

Why your student-athlete’s physical should be conducted by a sports medicine specialist

Dr. Anastasi from Mayo Clinic Orthopedics and Sports Medicine in Tempe answers some of the most common questions.
...
Dr. Richard Carmona

Great news: Children under 5 can now get COVID-19 vaccine

After more than two years of battle with an invisible killer, we can now vaccinate the youngest among us against COVID-19. This is great news.
T-Mobile CEO says “truly sorry” for hack of 50M users’ data