T-Mobile warned that a hacker was able to access the personal information of 37 million customers

T-Mobile said it suffered a computer attack that allowed hackers to access the personal information of 37 million users.. The operator indicated that the theft of information included data such as customer names, their addresses, email address, phone number, date of birth, as well as aspects related to their contract and the number of lines and tariff plans.

As part of their presentation to the authorities, they detailed that knew about the hacking of their computer systems on January 5. However, according to research done so far The attack took place at the end of November.

They clarified that after they became aware of the mass theft of information, they began to eliminate the vulnerability that was used to carry out the attack.

According to T-Mobile the attack was made possible because the hackers took advantage of a bug in one of their APIs.therefore, they did not have to directly breach the company’s system to obtain information.

“Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time, and there is currently no evidence that an attacker was able to break into or compromise our systems or our network,” the operator said.

This is not the first time that T-Mobile has been subjected to massive theft of its customers’ information. since 2018 they have suffered eight attacks of considerable force. The last time such an event happened was in 2022, when a group of hackers known as Lapsus$ carried out a type of attack that allowed them to take control of a large number of phone numbers.

To take into account the scale of the attack that T-Mobile has suffered, it must be remembered that the operator has a total of 110 million customers. It means that almost a third of all subscribers suffered from this hack alone.

The company is expected to directly notify users whose information may have been compromised by the hack.