DisclosureLens
MisuseTelecom & MediaInformationPrivilege AbuseTargetedIdentity (basic)Government IDCredentialsMediumContained

T-MOBILE USA, INC.

bd_d0a0d4c09bfccbd4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 5, 2026

Filed

Mar 31, 2026

To disclose

26 days

Affected

1state residents only

Confidence

66%
Full breach record for T-MOBILE USA, INC. →22 incidents on file

T-Mobile, USA reported an insider wrongdoing incident to the Maine Attorney General. An unauthorized individual accessed limited information on one Maine resident's account on January 12, 2026. The breach was discovered on March 5, 2026. Affected data included name, address, email, account number, phone numbers, PIN, driver's license, DOB, and SSN. T-Mobile reset the account PIN and offered 24 months of credit monitoring. Notification was sent on March 31, 2026.

Maine clockDiscovered Mar 5, 2026 → Filed with AG Mar 31, 202626d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 52 days
discovery → filing · 26 days

Jan 12, 2026

Begins

Mar 5, 2026

Discovered

Mar 31, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.