HackingIdentity (basic)Government IDFinancial accountMediumActive

T-MOBILE USA, INC.

bd_378732a40d9f790b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 17, 2021

Filed

Aug 19, 2021

To disclose

2 days

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for T-MOBILE USA, INC. →22 incidents on file

T-Mobile USA notified the New Hampshire Attorney General on August 19, 2021, regarding a cybersecurity incident discovered on August 17, 2021. A bad actor illegally accessed unencrypted personal information, including names, SSNs, driver's license numbers, and account PINs. T-Mobile shut the entry point, engaged forensic experts and federal law enforcement, and provided free credit monitoring. The investigation was ongoing at the time of filing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 2 days

Aug 17, 2021

Discovered

Aug 19, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Delaware State AGbd_f401f39a02cdaac62021-08-19Verified
Washington State AGbd_6c7de9e9876d5dac2021-08-24 · +5dCandidate
California State AGbd_b2fa46f7553069252021-08-25 · +6dVerified
Massachusetts State AGbd_6e3dba4ecc8166012021-08-26 · +7dVerified

Show 2 more filings ↓up to 12d gap

Oregon State AGbd_f59f5dad6f2da02e2021-08-27 · +8dVerified
South Carolina State AGbd_4f029ec65fed3c952021-08-31 · +12dVerified

Name: T-MOBILE USA, INC.
norm: t mobile usa
Domain: t-mobile.com

Name: T-MOBILE USA, INC.
norm: t mobile usa
Domain: t-mobile.com

Discovered: Aug 17, 2021
Materiality determined: —
Notification sent: Aug 19, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Cybersecurity team quickly responded to the security incident and shut the entry point used to gain access
Began a deep technical review with assistance from leading cybersecurity forensics experts
Engaged with federal law enforcement and is actively assisting their investigation
Issued a national press release
Launched a website to provide more information about the security incident
Provide individuals with resources to protect themselves and activate two years of free credit monitoring and identity theft detection services
Changes made: Working to further enhance security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 2 days(2 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Delaware State AGAug 19 · first

New Hampshire State AGAug 19 · first · this page

Washington State AG+5d

California State AG+6d

Massachusetts State AG+7d

Oregon State AG+8d

South Carolina State AG+12d

Pattern: first filing Aug 19 (DE), last Aug 31 (SC) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/t-mobile-usa-20210819.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2021
Raw hash: 4fed840dc0cdf05f6aed8ccadd9728ac3d0b97df935199d5247271b0e0ca6d1f

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityT-MOBILE USA, INC.

Victim entityT-MOBILE USA, INC.

Incidentdiscovered Aug 17, 2021

Stated responseCybersecurity team quickly responded to the security incident and shut the entry point used to gain access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov