T-Mobile confirmed Thursday that an unidentified malicious intruder breached its network in late November and stole data on 37 million customers, according to a regulatory filing.
In a filing with the U.S. Securities and Exchange Commission, T-Mobile said that the data breach was found on Jan. 5, adding that data exposed to the theft did not include critical information such as PINs, bank account numbers, credit card information, Social Security numbers, or government identification numbers. Instead, addresses, phone numbers, and dates of birth were accessed, the filing said.
“Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time,” T-Mobile said, adding that the data was first accessed around Nov. 25 but wasn’t discovered for weeks later….