Data breach notice clarified by T-Mobile

T-Mobile has explained that only a single account had been compromised in a recent insider breach amid uncertainty that the "1" individual noted to be affected in a filing with the Office of the Maine Attorney General was merely a placeholder, SecurityWeek reports.

Information exposed by the incident included the individual's full name, physical and email addresses, birthdate, account number, phone number, T-Mobile account PIN, Social Security number, and driver's license number, according to the breach notice.

"We identified an isolated incident involving a single vendor employee who improperly accessed information related to a customer. No credentials were compromised," said a T-Mobile spokesperson, who added that all appropriate law enforcement authorities and the affected user have already been informed about the incident.

Such a development comes after a series of significant data security incidents at the leading U.S. telecommunications firm, one of which involved API exploitation resulting in the compromise of 37 million accounts.