TMobile Says Vendor Employee Stole One Customer’s Data

According to SecurityWeek, a notice submitted to the Maine Attorney General’s Office says T-Mobile recently detected unauthorized access to limited information from their account. Exposed information included full name, email address, physical address, account number and associated phone number, T-Mobile account PIN, date of birth, driver’s licence number, and SSN.

The company said personal financial account information and call records were not impacted, and the affected user’s T-Mobile account PIN has been reset as a precaution. Eduard Kovacs reports that the incident involved wrong-doing by a vendor’s employee who accessed one customer account, which changes the impression of the event. DataBreaches[.]net emailed T-Mobile to ask what the vendor did in response to the employee, but no reply has been received.