After being rocked by a massive data breach in August, US telecommunications giant T-Mobile has reportedly suffered another cyberattack.
According to documents posted by The T-Mo Report, this time around, though, the damage appears to be much less severe. It seems only a small subset of customers are affected.
There is no further detail about what exactly happened, with the documents simply saying that some info was leaked, the report said.
Affected customers fall into one of three categories. First, a customer may have only been affected by a leak of their customer proprietary network information (CPNI). This information may include the billing account name, phone numbers, number of lines on the account, account numbers, and rate plan info.
“That’s not great, but it’s much less of an impact than the breach back in August had, which leaked customer social security numbers,” as per the report.
The second category an affected customer might fall into is having their SIM swapped. This is where a malicious actor will change the physical SIM card associated with a phone number in order to obtain control of the number.
This can, and often does, lead to the victim’s other online accounts being accessed via two-factor authentication codes sent to their phone number.
The document said that customers affected by a SIM swap have now had that action reversed.
The final category is simply both of the other two. Affected customers could have had both their private CPNI viewed as well as their SIM card swap.