Another day, another breach - T-Mobile 15 million customers

[allisolm]

http://www.usatoday.com/story/tech/...may-have-exposed-15-million-records/73171066/

The breach happened at Experian.

"...what we know right now is that the hacker acquired the records of approximately 15 million people, including new applicants requiring a credit check for service or device financing from September 1, 2013 through September 16, 2015,"

"The data set was for applicants and customers of T-Mobile who applied for service over that two year period," said Experian spokeswoman Susan Henson.

"The compromised information includes customers' names, addresses and birth dates as well as encrypted fields with Social Security number and ID number, which could be a driver’s license or passport number.

Experian told T-Mobile the encryption protecting those numbers may have been compromised, Legere said."

 

[Hugo Drax]

At this rate, everyones info will be in some torrent.

 

[vi edit]

Welp...that includes me.

I signed up to t-mobile in April. LAME.

 

[Fanatical Meat]

T-Mobile does have pretty sloppy IT practices from allowing people to view the monitor when a transaction is happening to having some old XP machines lying around until recently.

 

[SamQuint]

Sad truth, there are two types of companies out there. Those that have been hacked, and those that don't know they have been hacked.:|

 

[TheVrolok]

At this rate, everyones info will be in some torrent.

This. Honestly, there needs to be some change in the way identities are "managed." Legislation will need to catch up to technology. Everyone will have their "private information" out there soon enough.

 

[WaTaGuMp]

As long as my midget goat porn site info is secure, its cool.

 

[dainthomas]

I guess the only consolation is that SO many records are being compromised now that the chances of any one person's information being used is pretty low.

But yeah, there needs to be some way to check credit other than with SSN.

 

[John Connor]

As long as my midget goat porn site info is secure, its cool.

Shit... So long as my puking Japanese woman fetish porn info is secure I'm good...

 

[John Connor]

Since the Anthem/Blue Cross hack I got two years of free credit protection. Same thing will happen here.

WTF though. What happened to encryption? What was the vector? I mean FFS. My shity little phpBB forum's passwords are bcrypted. Cracking that is a PITA.

 

[CPA]

http://www.usatoday.com/story/tech/...may-have-exposed-15-million-records/73171066/

The breach happened at Experian.

"...what we know right now is that the hacker acquired the records of approximately 15 million people, including new applicants requiring a credit check for service or device financing from September 1, 2013 through September 16, 2015,"

"The data set was for applicants and customers of T-Mobile who applied for service over that two year period," said Experian spokeswoman Susan Henson.

"The compromised information includes customers' names, addresses and birth dates as well as encrypted fields with Social Security number and ID number, which could be a driver’s license or passport number.

Experian told T-Mobile the encryption protecting those numbers may have been compromised, Legere said."

Social Security number is supposed to be a protected piece of information, meaning it is supposed to be only required for government forms. The fact that we have to use if for practically everything now is ridiculous. I wish the government would crack down on companies requiring us to use it.

 

[KeithP]

T-Mobile does have pretty sloppy IT practices from allowing people to view the monitor when a transaction is happening to having some old XP machines lying around until recently.

The breach happened at Experian.

RIF

-KeithP

 

[John Connor]

Social Security number is supposed to be a protected piece of information, meaning it is supposed to be only required for government forms. The fact that we have to use if for practically everything now is ridiculous. I wish the government would crack down on companies requiring us to use it.

Yeah, just like my rotten bank. It's not supposed to be for ID purposes at all.

 

[Homerboy]

I use TMobile -- but never applied for credit.
SAFE!

 

[Homerboy]

Question: What happens with the Credit Monitoring services get hacked!?!?!

<mind blown>

 

[Brainonska511]

I have TMobile, but it's all prepaid and never gave them my SSN to apply for credit/contract.

 

[vi edit]

Question: What happens with the Credit Monitoring services get hacked!?!?!

<mind blown>

Well, Experian owns the credit monitoring service they offered. So yeah.....

 

[Hugo Drax]

Shit... So long as my puking Japanese woman fetish porn info is secure I'm good...

I heard the Japanese coffee enema shower site is secure as well.

 

[John Connor]

LOL!

 

[SunnyD]

Good news is that I already resigned myself to the fact that all of my PII is already out there since the day I was born.

This also seems weirdly appropriate:

I'm going to be Wolfgang Shitzowitz.

 

[mmntech]

I think a lot of these big corporations have deluded themselves into thinking that this stuff can't happen to them. Probably because a lot of them cut their chops back when the worst threats were worms. Oh, they took precautions for that. So they never invest in security audits or upgrades.

Most of these hacking cases aren't just some lone neckbeard in their basement anymore. A lot of these guys now have big money backing them. Corporations have to react accordingly.

 

[shortylickens]

I only use prepaid with Tmobile, so they shouldnt have much info. I hope.

 

[KentState]

It doesn't even take "hacking" to get this stuff. I don't work for/with T-Mobile and I actually came across files of theirs on a third party server I was given access to. It's a huge red flag when these companies like Experian, Acxiom, Neustar, etc get handed thousands of files a day with potential PII information.

 

[BUTCH1]

I have TMobile, but it's all prepaid and never gave them my SSN to apply for credit/contract.

That's how I roll too but T-mobile has slid downhill badly in the last few years. Sometimes I'll get a text hours after it was sent, with voicemail you constantly have to log on and re-save messages or they get dumped. Yea, I get it, if they didn't do that there would be lazy people with hundreds of messages but they should have given one the ability to "perma-save" 4-5 important messages, nope. then the coverage is getting worse, embarrising when someone with Trac-phone get bars and you don't. Fuck T-mobile, I'm dumping 'em.

 

[Ken g6]

I use TMobile -- but never applied for credit.
SAFE!

Me too! :thumbsup: So glad I chose prepaid when I signed up in October 2013.