InfoSecBulletin Cybersecurity for mankind
US wireless carrier T-Mobile is informing some customers that their personal information was compromised in a recent data breach.
After being alerted to unauthorized activity on its systems, the company discovered that a malicious actor had access to a “small number” of T-Mobile accounts between late February and March 2023.
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
The exposed information varies, but includes customer names, birth dates, contact information, T-Mobile account PINs, account numbers and phone numbers, number of lines, Social Security numbers, IDs, balance, and internal T-Mobile codes used to service customer accounts.
According to the wireless carrier, no personal financial account information or call records were compromised in the incident.
T-Mobile reset the impacted customers’ account PINs and recommends that they update the PINs, either by logging in to T-Mobile.com or by contacting the company’s customer support.
The firm told the Maine Attorney General’s Office that only 836 individuals were impacted by the data breach.
This data breach might have been only a small incident, but it is the second one that T-Mobile has disclosed this year. In January, the company announced that a threat actor abused an API to access the personal information of roughly 37 million postpaid and prepaid customers.
