Bug reportedly exposed T-Mobile customers’ personal data – CNET

T-Mobile Prism

A flaw in T-Mobile’s website allowed access to a customer’s data by guessing their phone number, Motherboard reports.

Josh Miller

A vulnerability on T-Mobile‘s website allowed access to millions of customers’ personal data, including email addresses and account numbers, Motherboard reported Tuesday.

The flaw, which Motherboard said was discovered by security researcher Karan Saini, could have allowed hackers who knew — or guessed — a customer’s phone number to obtain data valuable in social engineering attacks, or perhaps even hijacking victim’s numbers. The bug was repaired Friday after Motherboard asked the wireless carrier about the issue.

Saini told Motherboard that an attacker could leverage the vulnerability by writing a script to siphon data from T-Mobile’s 76 million customer accounts to create a searchable database of up-to-date information on its users. He classified it as “a very critical data breach.”

T-Mobile disputed those findings in a statement late Tuesday.

“We resolved the vulnerability that was reported to us by the researcher in less than 24 hours, and we have confirmed that we have shut down all known ways to exploit it,” the company said in a statement. “As of this time we’ve found no evidence of customer accounts affected as a result of this vulnerability.”

This isn’t the first time T-Mobile customers’ personal data has been exposed. Hackers stole the personal data of 15 million T-Mobile customers by going after Experian, the company that processes the wireless carrier’s credit checks. The credit-reporting bureau said in 2015, over a two-year period, hackers made off with data that included customers’ names, birth dates, addresses and Social Security and drivers’ license numbers.

Updated at 11 p.m. PT with T-Mobile statement.

Special Reports: All of CNET’s most in-depth features in one easy spot.

It’s Complicated: This is dating in the age of apps. Having fun yet? These stories get to the heart of the matter.


🕐 Top News in the Last Hour By Importance Score

# Title 📊 i-Score
1 NOAA is scrambling to fill forecasting jobs after cuts to the National Weather Service 🔴 78 / 100
2 Jury Discharged, But Hockey Canada Sexual Assault Trial Will Continue By Judge Alone 🔴 75 / 100
3 European nation creates guide to 'identify Russian spies' as WW3 fears grow 🔴 75 / 100
4 FAA license update brings SpaceX closer to next Starship launch 🔴 72 / 100
5 New speed limit suggestions that could see 10mph roads branded 'laughable' 🔴 65 / 100
6 Sean "Diddy" Combs Trial: Every Bombshell (Live Updates) 🔴 65 / 100
7 Babies start showing empathy even before they can speak 🔵 45 / 100
8 PSN Store "PlayStation Indies" Sale Kicks Off 🔵 45 / 100
9 Sir Jim Ratcliffe loses billions as Man Utd co-owner hit hard in the pocket 🔵 35 / 100
10 Foo Fighters drummer Josh Freese says he was booted from the band 🔵 35 / 100

View More Top News ➡️