On Thursday, T-Mobile revealed that Experian, a third-party used for customer credit checks, had been breached. As part of the breach, 15 million T-Mobile customers had their personal data stolen from the company. The theft affected customer data ranging back two years, from September 2013 through September 2015.
The stolen data included names, addresses and birth dates, as well as encrypted social security numbers and ID numbers (such as driver's license or passport number). The company notes that no credit card numbers or bank account information was taken. Whilst the more sensitive data was encrypted, the company states that this encryption may have been compromised by the attackers, but does not mention the type of encryption used or why this might be the case.