UnknownTelecom & MediaInformationCustomer Data InvolvedPIIHighContained

T-MOBILE USA, INC.

bd_776dc7fa5e822ff5 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Nov 29, 2021

To disclose

—

Affected

116,079state residents only

Linked

3 records

Confidence

68%

Full breach record for T-MOBILE USA, INC. →22 incidents on file

T-Mobile USA submitted a supplemental notice to the New Hampshire Attorney General on November 23, 2021, regarding a security event affecting New Hampshire residents. The company reported that it detected and shut down the event and sent individual notices to 116,079 residents between August 18 and October 24, 2021. The investigation was stated to be complete.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Nov 29, 2021

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 records about the same incident.View merged incident

A leak claim by arvinclub about this victim was first seen 81 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedarkleakmarketbd_90cfff6d389602932022-04-21 · +143dCandidate

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_fa6c5cf443cd91492022-03-08 · +99dVerified by operator

Name: T-MOBILE USA, INC.
norm: t mobile usa
Domain: t-mobile.com

Name: T-MOBILE USA, INC.
norm: t mobile usa
Domain: t-mobile.com
Industry: Telecom & Mediallm

Discovered: —
Materiality determined: —
Notification sent: Oct 24, 2021
Affected individuals: 116,079state-resident count only
Data types: PII
Attack vector: Unknown
Threat actor: External

During the incident: Detected and shut down a security event
Sent individual notices to 116,079 New Hampshire residents between August 18 and October 24, 2021
Updated our notification website
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGNov 29 · first · this page

Massachusetts State AG+99d

Pattern: first filing Nov 29 (NH), last Mar 8 (MA) — a 99-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/t-mobile-usa-20211129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2021
Raw hash: 3732030649ba32830cb6a3ad66e43899bb04b5397ce8556232942b7e26c84406

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityT-MOBILE USA, INC.

Victim entityT-MOBILE USA, INC.

IncidentUnknown

Stated responseDetected and shut down a security event

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov