T-Mobile: API abused to pull data on 37M accounts ยท updates https://pwn.watch/i/t-mobile-api-breach-37-million-2023 T-Mobile said an attacker had abused a single API since around Nov 25, 2022. They pulled names, billing addresses, emails, phone numbers, birth dates and plan details for about 37 million accounts until T-Mobile detected it on Jan 5, 2023. en Thu, 19 Jan 2023 00:00:00 GMT T-Mobile: API abused to pull data on 37M accounts: T-Mobile 8-K filing discloses about 37 million affected accounts https://pwn.watch/i/t-mobile-api-breach-37-million-2023 https://pwn.watch/i/t-mobile-api-breach-37-million-2023#2023-01-19-f526cd95 Thu, 19 Jan 2023 00:00:00 GMT high <p><a href="https://www.sec.gov/Archives/edgar/data/1283699/000119312523010949/d641142d8k.htm">Source</a></p> T-Mobile: API abused to pull data on 37M accounts: T-Mobile detects the API abuse and stops it within a day https://pwn.watch/i/t-mobile-api-breach-37-million-2023 https://pwn.watch/i/t-mobile-api-breach-37-million-2023#2023-01-05-f02d9d3b Thu, 05 Jan 2023 00:00:00 GMT high <p><a href="https://www.sec.gov/Archives/edgar/data/1283699/000119312523010949/d641142d8k.htm">Source</a></p>