{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T23:39:04.690Z",
  "tag": {
    "id": "t-mobile",
    "label": "T-Mobile",
    "isStack": false,
    "url": "https://pwn.watch/t/t-mobile",
    "feed": "https://pwn.watch/t/t-mobile/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "t-mobile-api-breach-37-million-2023",
      "title": "T-Mobile: API abused to pull data on 37M accounts",
      "url": "https://pwn.watch/i/t-mobile-api-breach-37-million-2023",
      "json": "https://pwn.watch/i/t-mobile-api-breach-37-million-2023.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "no-fix-needed",
      "product": "T-Mobile US",
      "tags": [
        "t-mobile",
        "api",
        "data-breach"
      ],
      "cveIds": [],
      "affectedVersions": [],
      "fixedVersions": [],
      "startedAt": "2023-01-05",
      "closedAt": "2023-01-19",
      "updatedAt": "2023-01-19",
      "summary": "T-Mobile said an attacker had abused a single API since around Nov 25, 2022. They pulled names, billing addresses, emails, phone numbers, birth dates and plan details for about 37 million accounts until T-Mobile detected it on Jan 5, 2023.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "t-mobile-api-breach-37-million-2023",
      "incidentTitle": "T-Mobile: API abused to pull data on 37M accounts",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2023-01-19",
      "title": "T-Mobile 8-K filing discloses about 37 million affected accounts",
      "body": null,
      "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1283699/000119312523010949/d641142d8k.htm",
      "url": "https://pwn.watch/i/t-mobile-api-breach-37-million-2023"
    },
    {
      "incident": "t-mobile-api-breach-37-million-2023",
      "incidentTitle": "T-Mobile: API abused to pull data on 37M accounts",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2023-01-05",
      "title": "T-Mobile detects the API abuse and stops it within a day",
      "body": null,
      "sourceUrl": "https://www.sec.gov/Archives/edgar/data/1283699/000119312523010949/d641142d8k.htm",
      "url": "https://pwn.watch/i/t-mobile-api-breach-37-million-2023"
    }
  ]
}