T-Mobile Confirms Stolen Data is Genuine

T-Mobile confirmed on Tuesday that internal information posted on the Internet by hackers was stolen from its systems, but said it does not appear customer data is in jeopardy.

By Jeremy Kirk
Tue, June 09, 2009

IDG News Service — T-Mobile confirmed on Tuesday that internal information posted on the Internet by hackers was stolen from its systems, but said it does not appear customer data is in jeopardy.

Hackers posted a message on Saturday on the Full Disclosure vulnerability message board claiming they'd pilfered confidential documents as well as financial and database information from T-Mobile's servers. After trying to sell the data to T-Mobile's competitors, they wrote they were offering the information to the highest bidder.

However, T-Mobile disputes the value of the data. "Regarding the recent claim on a Web site, we've identified the document from which information was copied and believe possession of this alone is not enough to cause harm to our customers," the company said.

T-Mobile said further information could not be released due to the ongoing investigation. The company will contact customers if it becomes evident personal information was compromised, it said.

In the message on Full Disclosure, the hackers posted data showing information on operating system versions, applications and IP (Internet protocol) addresses allegedly collected from T-Mobile's systems. It revealed information on what kind of internal software systems the company uses, such as software from vendors including Tibco Software, SAP, Centivia and Teradata.

At least one data security specialist doubted the hackers obtained as much sensitive information as they claimed.

"If these guys have personally identifiable information, then they would have exposed enough of that to give credibility to the story, because it's going to massively increase the value of what they're going to sell," said Paul Davie, founder of data security specialist Secerno. "So I suspect that they don't have that kind of thing."

T-Mobile International is a wholly-owned subsidiary of Deutsche Telekom of Germany. In its first quarter 2009 financial results ending in March, the company counted 148.4 million customers in 12 countries.

(Robert McMillan in San Francisco contributed to this report.)

You are here: Technology Topics » Security » News

Most Recent Security Stories

White Papers »

Identity Governance: The Business Imperatives

This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.

CA Technology Brief: CA Point of View: Content Aware Identity & Access Management

This paper explores the concept of content-aware IAM, describes the integrated architecture for this new approach, and highlights the benefits that this approach provides.

Aberdeen Analyst Insight: Does Your Enterprise Have a Dropbox Problem?

Without policies, awareness and supported alternatives for sharing files securely, end-users will often overlook security and compliance in favor of getting the job done. Read this whitepaper to determine if your enterprise has a "Dropbox Problem" and ways successful organizations address this problem.

Google: Security for Google Apps Messaging & Collaboration

Content provided by Google

Find out about how Google creates a security-based platform for Google Apps, covering topics like information security, physical security, and operational security.

Architecting the Security of the Next-Generation Data Center

This document is aimed at those looking at data center builds, upgrades, or consolidation. It provides an introduction to some of the new security challenges of such environments and provides recommendations for implementing security in next-generation data centers.

Who Owns Security in the Data Center?

This editorial brief addresses the disconnect between security and operations teams and the need for IT operations teams to address security and risk management.

Webcasts »

Gartner Next Generation Network IPS Webcast

Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.

McAfee Continuous Compliance

3 minute Flash video - overview of the need for and value of Configuration Control.

Taming the Wild West: How to build a strong cloud security strategy

Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."

Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware

Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.

Quantifying the Business Value of VMware View - Webcast

Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business

Deliver Private Cloud Database as a Service with VMware vFabric Data Director

VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.

Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter