T-Mobile’s massive data breach leaks info for an additional 5.3 million subscribers

News of T-Mobile's latest data breach is getting worse, as the company announces new details of its investigation. While someone with the leaked data said they had obtained information for as many as 100 million subscribers, including SIM info, IMEI numbers, and more, T-Mobile's first statement puts the figure at 47 million or more and makes no mention of IMEI/IMSI data.

Now, T-Mobile has confirmed that for the 7.8 million contracts, or postpaid, customers it counted in the breach, the stolen data included the information mentioned Thursday (first and last name, date of birth, Social Security number, and driver number). license/ID number), as well as phone number and IMEI/IMSI information. IMEI stands for International Mobile Equipment Identity and is the number assigned to each mobile device.

IMSI stands for International Mobile Subscriber Identity and is the identifier for the SIM card associated with your mobile number. Such data could be used to track mobile devices or assist in SIM swapping attacks where someone hijacks your phone number to intercept two-factor authentication codes or other information.

Additionally, 5.3 million more postpaid subscribers have also been identified as part of the breach, but without revealing their driver's license/ID or Social Security numbers. The same goes for the additional 667,000 former T-Mobile customer accounts added to the total. Former Sprint and Boost Mobile prepaid customers remain unclear, however, 52,000 names associated with Metro by T-Mobile accounts were stolen.

Also Read:

• American Horror Stories: How to Watch AHS Episode 6 for Free?
• List of Samsung Devices Getting Android 12 Update

An unspecified number of files contains "phone number, IMEI, and IMSI number." According to T-Mobile that doesn't include any personally identifiable information, which is a questionable claim as it could easily tie someone's identity to their phone number based on other leaked data or simply browsing publicly available lists.

The FCC has announced it is investigating the incident, and at least one class-action lawsuit has been filed against T-Mobile, calling its response and promising two years of identity protection service “inadequate.” The investigation is still ongoing, but T-Mobile customers (current, former, or just prospective filling out applications) can go here for more information.

Keywords: t-mobile, imei, imsi, t-mobile leaked