T-Mobile denies hacker break-in
T-Mobile says that although information about its systems recently published on the internet is genuine, it did not come from a break-in of T-Mobile USA's systems. On the contrary, the information had obviously been copied from a specific internal document. How the document was accessed is still under investigation, although it's speculated that a T-Mobile employee may have passed the data on. T-Mobile says that the information concerned is not customer data.
Investigation and public speculation were sparked off by an ominous posting on the Full Disclosure security mailing list, in which unknown parties claimed to be in possession of database content, confidential documents and server programs. They said that they had already offered to sell the data to T-Mobile's competitors, but they "they didn't show interest", so the data was now for sale to the highest bidder. A list of server and database systems attached to the post, showing names, operating systems and IP addresses, was provided as evidence of the validity of the claim.
- Speculation about hacker break-in at T-Mobile USA, a report from The H.