{"id":46161,"date":"2022-04-12T17:29:50","date_gmt":"2022-04-12T17:29:50","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33319\/T-Mobile-Secretly-Bought-Its-Customer-Data-From-Hackers-To-Stop-Leak.-It-Failed.html"},"modified":"2022-04-12T17:29:50","modified_gmt":"2022-04-12T17:29:50","slug":"t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/","title":{"rendered":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed"},"content":{"rendered":"<div readability=\"32\">\n<div><picture class=\"responsive-image lazyloader--lazy lazyloader--lowres\"><source media=\"(min-width: 1000px)\" srcset=\"https:\/\/video-images.vice.com\/articles\/6255a38f6032f90096991114\/lede\/1649779771333-tmobile.jpeg?crop=1xw:0.843328335832084xh;center,center&amp;resize=20:*\"><source media=\"(min-width: 700px)\" srcset=\"https:\/\/video-images.vice.com\/articles\/6255a38f6032f90096991114\/lede\/1649779771333-tmobile.jpeg?crop=1xw:0.843328335832084xh;center,center&amp;resize=20:*\"><source media=\"(min-width: 0px)\" srcset=\"https:\/\/video-images.vice.com\/articles\/6255a38f6032f90096991114\/lede\/1649779771333-tmobile.jpeg?crop=1xw:0.843328335832084xh;center,center&amp;resize=20:*\"><img class=\"responsive-image__img\" alt=\"T-Mobile\"><\/picture><\/div>\n<p>Image: SOPA Images\/Contributor<\/p>\n<\/div>\n<div data-component=\"BodyComponentRenderer\" readability=\"77.375157289232\"><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"33\"><\/p>\n<p>Last year, T-Mobile confirmed it was breached after hackers offered to sell the personal data of 30 million of its customers for 6 bitcoin worth around $270,000 at the time. According to court documents unsealed today and reviewed by Motherboard, a third-party hired by T-Mobile tried to pay the hackers for exclusive access to that data and limit it from leaking more widely.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"33\"><\/p>\n<p>The plan ultimately failed, and the criminals continued to sell the data despite the third-party giving them a total of $200,000. But the news unearths some of the controversial tactics that might be used by companies as they respond to data breaches, either to mitigate the leak of stolen information or in an attempt to identify who has breached their networks.<\/p>\n<p><\/span><span><\/p>\n<div class=\"adph adph--border\">\n<p>Advertisement<\/p>\n<\/div>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"28\"><\/p>\n<p>T-Mobile did not respond to a request for comment on whether it was aware the third-party it hired had paid cybercriminals hundreds of thousands of dollars to stop leaking their data.<\/p>\n<p><\/span><\/p>\n<blockquote data-component=\"QuoteBlock\" class=\"abc__quote abc__quote--blockquote\" readability=\"9.3212851405622\">\n<p><em><strong>Do you work in incident response? We&#8217;d love to hear from you. Using a non-work phone or computer, you can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, OTR chat on<\/strong><\/em>&nbsp;<a href=\"mailto:jfcox@jabber.ccc.de\">jfcox@jabber.ccc.de<\/a><em><strong>, or email<\/strong><\/em>&nbsp;<a href=\"mailto:joseph.cox@vice.com\">joseph.cox@vice.com<\/a><em><strong>.<\/strong><\/em><\/p>\n<\/blockquote>\n<p><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"26.04\"><\/p>\n<p>On Tuesday, the <a href=\"https:\/\/www.vice.com\/en\/article\/dyp9nk\/fbi-doj-law-enforcement-seize-raidforums\"><span>Department of Justice unsealed an indictment<\/span><\/a> against Diogo Santos Coelho, who it alleges is the administrator of a popular hacking site called RaidForums. Law enforcement also uploaded a banner to the RaidForums site announcing they had taken over its domain.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"16.588983050847\"><\/p>\n<p><a href=\"https:\/\/www.nationalcrimeagency.gov.uk\/news\/hacking-forum-taken-offline-and-uk-suspect-arrested\" target=\"_blank\" rel=\"noopener\"><span>Coelho was arrested in the United Kingdom in March<\/span><\/a>. Included in the <a href=\"https:\/\/www.documentcloud.org\/documents\/21583722-raid-extradite\" target=\"_blank\" rel=\"noopener\">affidavit in support of request for his extradition<\/a> to the United States is a section describing a particular set of data that was advertised on RaidForums in August.&nbsp;<\/p>\n<p><\/span><span><\/p>\n<div class=\"adph adph--border\">\n<p>Advertisement<\/p>\n<\/div>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"36\"><\/p>\n<p>\u201cOn or about August 11, 2021, an individual using the moniker \u2018SubVirt\u2019 posted on the RaidForums website an offer to sell recently hacked data with the following title: \u2018SELLING-124M-U-S-A-SSN-DOB-DL-database-freshly-breached.\u2019\u201d Later, Subvirt changed the thread title to \u201cSELLING 30M SSN + DL + DOB database,\u201d the document continues. The document does not name the victim company, instead referring to it as Company 3, but says another post confirmed that the data belonging to \u201ca major telecommunications company and wireless network operator that provides services in the United States.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"36\"><\/p>\n<p>The document goes on to say that this company \u201chired a third-party to purchase exclusive access to the database to prevent it being sold to criminals.\u201d An employee of this third-party posed as a potential buyer and used the RaidForums\u2019 administrator\u2019s middleman service to buy a sample of the data for $50,000 in Bitcoin, the document reads. That employee then purchased the entire database for around $150,000, with the caveat that SubVirt would delete their copy of the data, it adds. The purpose of the deletion would be that this undercover customer would be the only one with a copy of the stolen information, greatly limiting the chance of it leaking out further.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"28\"><\/p>\n<p>That\u2019s not what happened. The document says that \u201cit appears the co-conspirators continued to attempt to sell the databases after the third-party\u2019s purchase.\u201d<\/p>\n<p><\/span><span><\/p>\n<div class=\"adph adph--border\">\n<p>Advertisement<\/p>\n<\/div>\n<p><\/span><\/p>\n<div class=\"body-image\" data-component=\"ImageBlock\" readability=\"31\">\n<div class=\"body-image__img\">\n<div><picture class=\"responsive-image lazyloader--lazy lazyloader--lowres\"><source media=\"(min-width: 1000px)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1649781643518-3rd.png?resize=20:*\"><source media=\"(min-width: 700px)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1649781643518-3rd.png?resize=20:*\"><source media=\"(min-width: 0px)\" srcset=\"https:\/\/video-images.vice.com\/_uncategorized\/1649781643518-3rd.png?resize=20:*\"><img class=\"responsive-image__img\" alt=\"3rd.png\"><\/picture><\/div>\n<\/div>\n<div class=\"body-image__caption\" readability=\"32\">\n<p>A screenshot of the court document. Image: Motherboard.<\/p>\n<\/div>\n<\/div>\n<p><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"29.711711711712\"><\/p>\n<p>Company 3, the unnamed telecommunications firm that hired this third-party, was T-Mobile, according to Motherboard\u2019s review of the timeline and information included in the court records. <a href=\"https:\/\/www.vice.com\/en\/article\/akg8wg\/tmobile-investigating-customer-data-breach-100-million\"><span>Motherboard first revealed news of the breach<\/span><\/a> mentioned in the court document several days after the specific RaidForums threads mentioned. At the time Motherboard spoke to the person selling the data including SSNs and obtained samples of the data which confirmed the hacker had accurate information on T-Mobile customers. T-Mobile provided a statement at the time saying it was investigating the hack against its company. A day later, <a href=\"https:\/\/www.vice.com\/en\/article\/y3d4dw\/t-mobile-confirms-it-was-hacked\"><span>T-Mobile confirmed it had been breached<\/span><\/a>.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"33.457249070632\"><\/p>\n<p>The court documents do not name the third-party that bought the data, nor do they describe what sort of company it was. But in a <a href=\"https:\/\/www.t-mobile.com\/news\/network\/cyberattack-against-tmobile-and-our-customers\" target=\"_blank\" rel=\"noopener\">previous statement published in August<\/a>, Mike Sievert, CEO of T-Mobile, said \u201cThrough our investigation into this incident, which has been supported by world-class security experts Mandiant from the very beginning, we now know how this bad actor illegally gained entry to our servers and we have closed those access points. We are confident that there is no ongoing risk to customer data from this breach.\u201d<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"26.267015706806\"><\/p>\n<p>Mandiant did not immediately respond to a request for comment on whether it was the third-party that paid cybercriminals $200,000. In March <a href=\"https:\/\/www.mandiant.com\/company\/press-release\/mgc\" target=\"_blank\" rel=\"noopener\">Mandiant announced<\/a> it was being acquired by Google.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"29\"><\/p>\n<p>Victim companies often hire incident response or threat intelligence firms after they have been hacked to discover how exactly they were breached and to take mitigation steps against any further exposure.&nbsp;<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"36.423963133641\"><\/p>\n<p>These companies can sometimes deploy controversial tactics, <a href=\"https:\/\/www.thedailybeast.com\/inside-the-shadowy-world-of-revenge-hackers\" target=\"_blank\" rel=\"noopener\"><span>such as \u201chacking back,\u201d<\/span><\/a> where the firm will offensively strike back at the criminal hackers, perhaps by breaching their command and control or other servers to see what data was stolen, interfere with the hackers\u2019 infrastructure, or try to glean information on who the hackers might be. After hacking group LAPSUS$ targeted Nvidia, the group claimed in a post on its Telegram channel that someone had hacked into a machine the group was using to store the stolen Nvidia data and then deployed ransomware. The group alleged, without concrete evidence, this was done on behalf of Nvidia.<\/p>\n<p><\/span><span class=\"abc__textblock size--article\" data-component=\"TextBlock\" readability=\"19.105882352941\"><\/p>\n<p><em><strong>Subscribe to our cybersecurity podcast,&nbsp;<a href=\"https:\/\/itunes.apple.com\/gb\/podcast\/cyber\/id1441708044?mt=2\" target=\"_blank\" rel=\"noopener\">CYBER<\/a>. Subscribe to&nbsp;<a href=\"https:\/\/www.twitch.tv\/motherboardtv\" target=\"_blank\" rel=\"noopener\">our new Twitch channel<\/a>.<\/strong><\/em><\/p>\n<p><\/span><\/div>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/33319\/T-Mobile-Secretly-Bought-Its-Customer-Data-From-Hackers-To-Stop-Leak.-It-Failed.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[9954],"class_list":["post-46161","post","type-post","status-publish","format-standard","hentry","category-packet-storm","tag-headlinehackerprivacyphonecybercrimedata-lossfraud"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-12T17:29:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"432\" \/>\n\t<meta property=\"og:image:height\" content=\"435\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed\",\"datePublished\":\"2022-04-12T17:29:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/\"},\"wordCount\":901,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"keywords\":[\"headline,hacker,privacy,phone,cybercrime,data loss,fraud\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/\",\"name\":\"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"datePublished\":\"2022-04-12T17:29:50+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,privacy,phone,cybercrime,data loss,fraud\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackerprivacyphonecybercrimedata-lossfraud\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/","og_locale":"en_US","og_type":"article","og_title":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-04-12T17:29:50+00:00","og_image":[{"width":432,"height":435,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed","datePublished":"2022-04-12T17:29:50+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/"},"wordCount":901,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"keywords":["headline,hacker,privacy,phone,cybercrime,data loss,fraud"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/","url":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/","name":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"datePublished":"2022-04-12T17:29:50+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/t-mobile-secretly-bought-its-customer-data-from-hackers-to-stop-leak-it-failed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,privacy,phone,cybercrime,data loss,fraud","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackerprivacyphonecybercrimedata-lossfraud\/"},{"@type":"ListItem","position":3,"name":"T-Mobile Secretly Bought Its Customer Data From Hackers To Stop Leak. It Failed"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46161","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=46161"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/46161\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=46161"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=46161"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=46161"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}