Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
T-Mobile CEO Apologizes for Data Breach, Shares Info on Future Security Plans
- Thread starter MacRumors
- Start date
- Sort by reaction score
I asked in the last thread and noone answered
Is anyone signing up with McAfee? Are they reliable or will they just lose my data again
Is anyone signing up with McAfee? Are they reliable or will they just lose my data again
T-Mobile claims they will send me an email about these protection services “in the next few days”, nothing yet. At first I thought 2 years of service would be OK. Now that I’m considering the ramifications of having my DL, SS#, and all the rest stolen & sold, this is going to remain a problem for the rest of my life. 2 years doesn’t cover it. I think T-mobile needs to really cover for cost for the lifelong damage they have done.
why the hell would t-mobile want to store drivers license number, SSN and birth dates in their databases? are these not required only for addition as a customer and then this data can be purged as it is no longer needed by them?
“T-Mobile has now notified every current T-Mobile customer about the data breach”
I’m a current T-Mobile customer … they didn’t notify me!
I’m a current T-Mobile customer … they didn’t notify me!
Last edited:
So, just more empty words and promises? No further details needed? How convenient.
Same here, sort of. I have one postpaid line with Sprint and two Pay as You Go – Legacy lines with T-Mobile. None of my phones have received a text message about the breach. (One of my PAYG phones got a message about the account portal website being revamped. I haven't checked it out yet.) EDIT: I received an email regarding the breech for my other PAYG account (not the one that got the text message about the My T-Mobile website) on August 31 at 3:40 PM PDT.
Last edited:
I wonder if T-Mobile CEO Mike Siever is a T-Mobile customer.
And if he is, I wonder if his personal data was compromised as well.
And if he is, I wonder if his personal data was compromised as well.
It is regrettable and it is easy to blame management on this but it starts with the people managing the technology. I am sure management or even external auditors don't know about these problems. Management will take the blame and I am sure they will bring in people that know what they are doing.
Last edited:
I did this after the big Equifax breach a few years ago. It is probably the single most important thing you can do to protect yourself. It takes a lot for me to temporarily lift the freeze for even 24 hours. I mean a lot. I would have to buy a house or car. I can't tell you how many purchases I've nixed because a company decided it needed a credit check that I knew was not necessary.
Last edited:
It's likely all of this information has been stolen already. Remember the Equifax breach of 2017? But I understand your point. I think five or 10 years of protection is more appropriate. But good luck with that. Put a security freeze on your credit information with Equifax, Experian, TransUnion and even Innovis. And only lift it for 24 hours at a time for really important major purchases.
Actually it’s often management who overrule the people in charge of the technology who tell them they need to do something more/different (read:more expensive) to provide better protection.
Management hire the ”underlings” that hire the “salaried slaves”. It is managements sole responsibility to hire the best qualified people for any job available. But, of course, bottom line trumps any qualities, it seems. As demonstrated here, where they didn’t even discover, that the horses had bolted, before they were told (by the “horse thieve” ;-) How irresponsible is that for management?
These sophisticated tools he mentioned are readily available to anyone who wants them and is willing to look for them. In the cyberattack community they are just like a hammer or screwdriver that everyone has in their home.
These cyberattacks capitalizing on weak security protocols are the norm. Companies are not willing to pay the companies who have the experts necessary to lock down their systems what they want in terms of fees and ongoing support. There are three scenarios that this happens:
These cyberattacks capitalizing on weak security protocols are the norm. Companies are not willing to pay the companies who have the experts necessary to lock down their systems what they want in terms of fees and ongoing support. There are three scenarios that this happens:
- Competent IT personnel who know the weaknesses and have begged for outside help or strategic hire funding.
- Incompetent IT personnel who think they know what they are doing.
- Incompetent IT personnel who know enough to be dangerous and lazy.
I reached the same conclusion. T-Mobile is at least on high alert now. If I switch, then I’m exposing my information in yet another place with no guarantee that it won’t happen there.
I'm on the original 55+ plan: $60/month for two lines, with the option to add a third for $90 total. Currently utilizing all three lines, and two data-only lines (a car tracker and 2GB/month on an iPad). Five lines of service on various devices for just $110 total. They will have to pry that plan from my cold, dead hands.
Management should take the blame as it's likely it was their decisions (outsourcing, budget cutting, etc) that has spiralled down into this mess.
And no, why should they bring in people that know what they are doing? Are there any punishment for T-Mobile? The CEO just said sorry and made empty vague promises, and that's it.
Too late. As much as I usually rag on T-Mo, I doubt any other telco has good security either.
Last edited:
Funny to use SMS for 2FA for the very account that provides you with SMS service.
Worth noting that Mint runs on T-Mo's network. That's nice that they have great customer support, but I wonder whether you were affected by the breach equally. There's no technical reason T-Mo needs to know about Mint's customers, but they might anyway.
Thus probably it's better to get the notion of buying your own phone separately and use pay-as-you go or prepaid plans instead that won't require too many personal data.
If you care a lot about your privacy, yes, you can do prepaid without them knowing anything about you. I don't care enough, though.
Last edited: