On Thursday, T-Mobile reported a data breach that exposed the personal information of 37 million customers. The compromised data includes names, addresses, emails, phone numbers, and dates of birth. However, the company stated that no financial information or passwords were exposed. T-Mobile also noted that it was able to trace the source of the malicious activity and stop it within a day.
This is not the first time that T-Mobile customers have had their data stolen. In July, the company agreed to pay $350 million to settle a class action lawsuit related to a breach in August 2021. Furthermore, customer information was accessed in breaches that T-Mobile disclosed in January 2021, November 2019 and August 2018.
In response to the recent data breach, T-Mobile said it has invested heavily in its cybersecurity. However, Neil Mack, a senior analyst for Moody's Investors Service, noted that the frequency of these cyber breaches is an outlier compared to other telecom providers, and could alienate customers and attract scrutiny from regulators. T-Mobile is currently in the process of notifying those customers affected by the breach.