As for the specifics of the customer data that was obtained, T-Mobile stated in the filing that it included “name, billing address, email, phone number, date of birth, T-Mobile account number and information such as the number of lines on the account.” But here’s the good news, the company stated that “Our systems and policies prevented the most sensitive types of customer information from being accessed, and as a result, based on our investigation to date, customer accounts and finances were not put at risk directly by this event.”
While it may be small consolation to the victims, it seems that less data was compromised in the latest attack compared to the 2021 incident. In that case, Social Security numbers, addresses, birthdates, and driver’s license information of at least some customers or candidates were compromised.