T-Mobile Hacked

[JohnnyLicious]

T-Mobile’s website has been on and off today - probably no coincidence considering hackers have alledgedly broken into the T-Mo system, stealing everything you can imagine including:

http://phandroid.com/wp-content/uploads/2009/06/hakt.jpg

- Subscriber data
- Databases
- Confidential SIC documents
- Scripts and programs from their servers
- Financial documents up to 2009
- Much more

As if that wasn’t bad enough, the brazen bad boys have attempted to sell the data to T-Mobile’s competitors! They’ve been turned down, and for obvious reasons, but the hackers are now trying to auction off the data to the highest bidder.
Sure, they were smart enough to get all the goods, but they had better pray they were able to cover their tracks. Because if they weren’t, to quote the movie Half Baked (Update 1: It is from “Office Space”) , they’re going straight to “Federal Pound-Me-In-The-A$$ Prison”. Then again what are the chances they’re from the US? Oh well.
Something similar happened in 2005 and the perpetrator WAS caught:


T-Mobile was the target of a masssive 2005 hack, in which Nicholas Jacobsen was charged with unauthorized network access by the U.S. Secret Service. According to published reports, Jacobsen had access to all the information about T-Mobile’s 16 million U.S. subscribers.

Although the hackers this time around provided code proving they broke in, T-Mobile has yet to make an official statement or acknowledge the data breach.
UPDATE 2:


T-Mobile’s PR firm has contacted me with an official statement on behalf of the company:
“The protection of our customers’ information, and the safety and security of our systems, is absolutely paramount at T-Mobile. Regarding the recent claim, we are fully investigating the matter. As is our standard practice, if there is any evidence that customer information has been compromised, we would inform those affected as soon as possible.”

Source: http://phandroid.com/2009/06/07/t-mobile-hacked-data-stolen-including-everything/

Crap thats not good ahhhh

[Jet]

Ouch! This is going to be a big one, on a side note - Goodluck trying to sell my credit info lol!

[deserttopping]

my bank balance could get you to fresno on a greyhound.

[LazyGenius]

lol yea good luck trying to make something off of my financial info. (thats why im with tmo.)

if they were in for it for money then they should have hacked verizon or something.(those guys have got to be rich.)

[kaysesoze]

hmmm this story seems familiar????

[konzern]

lol havent u ever seen MANswers? if your gonna do a crime this is the type of crime to do lol cuz federal pen is not the same as general population state prisons.

[LazyGenius]

lol havent u ever seen MANswers? if your gonna do a crime this is the type of crime to do lol cuz federal pen is not the same as general population state prisons.
haha whats messed up is i know EXACTLY what your talking about...:)

[Andrea]

I doubt they're gonna get muuuch. That's why we're on T-Mobile. :p They should try AT&T with the iPhone snobs. :] lol

[kaysesoze]

they should have hacked something else instead of Tmobile... tmobile credit guidlines are lower than any other cell company, so the info is worthless almost.. sell records of a lot of people with sub par credit vs. hacking into Verizon where you gotta have real good credit to get an account with no deposit...
THEY FAILED !!!!

[ggrant3876]

WARNING! T-Mobile USA servers have been breached. The so called “hacker” has valuable information such as subscriber data and says they “have everything, their databases, confidential [sic] documents, scripts and programs from their servers, financial documents up to 2009.” The “hacker(s)” claim that they’ve been in close contact with the carrier’s competitors trying to sell the data, but have had no luck so far. Now, they are apparently looking to sell all of it to the highest bidder. The perpetrators allegedly call themselves “hackers”… if you would want to go as far as saying that. We aren’t really clear yet as to how all of this data was obtained and whether it was from an internal employee or not.
Our friends over at Engadget, however, have received an official comment from T-Mobile, stating that they are looking into the claim but cannot confirm if this has actually happened. “The protection of our customers’ information, and the safety and security of our systems, is absolutely paramount at T-Mobile. Regarding the recent claim, we are fully investigating the matter. As is our standard practice, if there is any evidence that customer information has been compromised, we would inform those affected as soon as possible.” Their statement pretty much amounts to your standard announcement anytime a claim like this is made somewhere - we see someone claims to have done something, we value your privacy and will work to ensure that all this gets cleared up, and we will be the first to inform you if data has been compromised. Hmm… let’s hope something happens soon… we’ll keep you posted.

[momentarylapseofreason]

WARNING! T-Mobile USA servers have been breached. The so called “hacker” has valuable information such as subscriber data and says they “have everything, their databases, confidential [sic] documents, scripts and programs from their servers, financial documents up to 2009.” The “hacker(s)” claim that they’ve been in close contact with the carrier’s competitors trying to sell the data, but have had no luck so far. Now, they are apparently looking to sell all of it to the highest bidder. The perpetrators allegedly call themselves “hackers”… if you would want to go as far as saying that. We aren’t really clear yet as to how all of this data was obtained and whether it was from an internal employee or not.
Our friends over at Engadget, however, have received an official comment from T-Mobile, stating that they are looking into the claim but cannot confirm if this has actually happened. “The protection of our customers’ information, and the safety and security of our systems, is absolutely paramount at T-Mobile. Regarding the recent claim, we are fully investigating the matter. As is our standard practice, if there is any evidence that customer information has been compromised, we would inform those affected as soon as possible.” Their statement pretty much amounts to your standard announcement anytime a claim like this is made somewhere - we see someone claims to have done something, we value your privacy and will work to ensure that all this gets cleared up, and we will be the first to inform you if data has been compromised. Hmm… let’s hope something happens soon… we’ll keep you posted.

They call themselves "Hackers"? How original :rolleyes:

So where did you hear this? It sounds a little fishy to me

[ZINGZOOM]

...........................source?

[momentarylapseofreason]

...........................source?


I did find this:
http://www.liquidmatrix.org/blog/2009/06/06/t-mobile-hacked-possible-massive-breach-in-play/

Still sounds like BS to me at this point

[ZINGZOOM]

It just became believable

http://seclists.org/fulldisclosure/2009/Jun/0062.html

http://www.engadgetmobile.com/2009/06/07/t-mobile-usas-servers-breached-subscriber-data-stolen/

[momentarylapseofreason]

It just became believable

http://www.engadgetmobile.com/2009/06/07/t-mobile-usas-servers-breached-subscriber-data-stolen/

How does that make it more believable since he was citing engadget in the first place? Not saying it hasn't happened but if you would have read the first post, you'd know the source in the first place.

On another note... the original site you posted does offer some possible proof of a breach.

(posting it back up for others)
http://seclists.org/fulldisclosure/2009/Jun/0062.html

[ZINGZOOM]

i didn't mean to delete the other link

was mean to post both.

[*susan*]

Threads merged.