T-Mobile has confirmed that it is investigating claims of hacking and stealing of its customer data and company proprietary information.
Sources claim that hackers gained access to T-Mobile US-servers and stole proprietary operating data, customer databases and financial records.
A message posted to the Full Disclosure mailing list states that a broad range of internal T-Mobile data has been compromised and was being put up for sale to the highest bidder. The purported hackers wrote that they had pitched the information to the wrong e-mail addresses but were now willing to sell the data to anyone.
The message reads: We have everything – their databases, confidential documents, scripts and programmes from their servers, financial documents up to 2009.
In a statement e-mailed to Security Fix, T-Mobile said it was investigating the claims. T-Mobile said that the protection of its customers’ information and the safety and security of its systems are of paramount interest to the company.
Reports claimed that the hackers had data that reflects information on operating system versions, applications and IP (Internet protocol) addresses allegedly collected from T-Mobile’s systems.
T-Mobile’s updated statement reads: Regarding the recent claim on a web site, we’ve identified the document from which information was copied, and believe possession of this alone is not enough to cause harm to our customers. We continue to investigate the matter and have taken additional precautionary measures to further ensure our customers’ information and our systems are protected.
“At this moment, we are unable to disclose additional information in order to protect the integrity of the investigation but customers can be assured if there is any evidence that customer information has been compromised, we would inform those affected as quickly as possible, the statement said.
17 million German customer records, including names, addresses, phone numbers, dates of birth and email addresses, went missing from T-Mobile’s storage.
The company said a storage device containing the files, is in the hands of unknown parties. T-Mobile’s parent company, Deutsche Telekom, claimed that it had no evidence that the records had been used since 2006.
