T-Mobile Investigating Claims It Was Breached

Online post offers sensitive data from wireless provider to the "highest bidder," but security experts are skeptical the breach is severe
By Kelly Jackson Higgins | DarkReading

Elaborate hoax or the real deal? An anonymous post on a popular security disclosure site during the weekend claiming to have accessed T-Mobile's databases, financial documents, and other sensitive data has the wireless provider currently investigating whether the data and systems are truly in the hands of bad guys.

A post on the Full Disclosure list asks for "serious offers" to purchase the supposedly stolen database access and documents from T-Mobile, and that the booty will go to the highest bidder. "We have everything, their databases, confidential documents, scripts and programs from their servers, financial documents up to 2009," the post reads.

The purported perpetrators also include a long list of servers and a database table they say belongs to T-Mobile. But security experts say much of the information could have been gathered via a penetration test, and doesn't necessarily confirm they have the goods.

"I would have thought they would have provided a few snippets of actual recovered data," says Paul Henry, security and forensic analyst for Lumension Security. "The data they showed publicly is nothing more than that which could be produced with a well done pen test."

T-Mobile said in a statement Monday that if there's any evidence that customer data was breached, it would alert the victims ASAP. "The protection of our customers' information, and the safety and security of our systems, is absolutely paramount at T-Mobile. Regarding the recent claim, we are fully investigating the matter. As is our standard practice, if there is any evidence that customer information has been compromised, we would inform those affected as soon as possible," the statement said.   Continue Dark Reading

Here's a sampling of the website offering the information for sale.  To see the entire page, click here

Hello world,

The U.S. T-Mobile network predominately uses the GSM/GPRS/EDGE
1900 MHz frequency-band, making it the largest 1900 MHz network in the
United States. Service is available in 98 of the 100 largest markets and 268 million potential customers.

Like Checkpoint Tmobile has been owned for some time. We have
everything, their databases, confidental documents, scripts and
programs from their servers,
financial documents up to 2009.

We already contacted with their competitors and they didn't show
interest in buying their data -probably because the mails got to the
wrong people- so now we are offering them for the highest bidder.

Please only serious offers, don't waste our time.

Contact: pwnmobile_at_safe-mail.net

Name Type Team Application Name ApplicationID Application
Operating System IP Address Facility Blank Blank Blank Tier 1 Apps Tier
2 Apps ? Prod


protun03 Prod IHAP Caller Tunes 64 CallerTunes 10.1.16.185 HP-UX 11.11 BOTHELL_7 #N/A 64 1


protun04 Prod IHAP Caller Tunes 64 CallerTunes 10.1.16.186 HP-UX 11.11 BOTHELL_7 #N/A 64 1


protun05 Prod IHAP Caller Tunes 64 CallerTunes 10.1.16.187 HP-UX 11.11 BOTHELL_7 #N/A 64 1

t-mobile breach, insecure.org