T-Mobile’s network has been hacked, according to an email posted this weekend on the Full Disclosure security mailing list. The anonymous group behind the email claims to have “everything” on T-Mobile’s servers, “…their databases, confidential documents, scripts, and…financial documents up to 2009.” If this security breach is true, it could be a disaster for T-Mobile and its millions of customers (full disclosure: I am a T-Mobile customer).
T-Mobile did not confirm or deny the breach in a statement this morning, but said it was investigating:
“The protection of our customers’ information, and the safety and security of our systems, is absolutely paramount at T-Mobile,” the company said. “Regarding the recent claim, we are fully investigating the matter. As is our standard practice, if there is any evidence that customer information has been compromised, we would inform those affected as soon as possible.”
The group allegedly attempted to contact T-Mobile’s competitors to sell the data, but didn’t find a buyer. Now, the data is for sale to the highest bidder. The email includes an extensive list of servers supposedly owned by T-Mobile. A message sent to the email address listed was not returned.