Some Mint Mobile subscribers were the victim of a data breach that could lead to SIM swaps

Some Mint Mobile subscribers were the victim of a data breach that could lead to SIM swaps،

Until the FCC approves T-Mobile to purchase Mint Mobile, the MVNO (Mobile Virtual Network Operator) continues to operate independently. Just yesterday Android Font reported that Mint Mobile customers were victims of a data breach. The compromised data includes customer names, phone numbers, email addresses, SIM/IMEI numbers, and Mint Mobile plan information used by customers affected by the data breach.

Mint Mobile says customers are not required to take further action after Mint says it has resolved “the underlying issue.” Mint Mobile sent emails to affected customers, emphasizing that information such as social security numbers and driver's license numbers are not collected by Mint so the data was not part of the data breach.

On the other hand, with the stolen SIM serial number, an attacker can forward the victim's phone number to another device controlled by the attacker. This allows the criminal to log into banking, securities, and other financial applications owned by the Mint Mobile client by hijacking OTPs (one-time passwords sent to verify a user's identity) and using them to connect to these applications in order to take control of them. credit cards, stocks, cash and other personal property.

Importantly, at this time there is no indication that this data breach led to SIM swap attacks against Mint Mobile subscribers.

Mint Mobile has notified affected customers of the data breach by sending an email

As an MVNO, Mint Mobile does not own cell towers or wireless networks. It mainly resells services of T Mobile for profit. If you are a Mint Mobile customer and received the company's email revealing the data breach, it is likely that your personal data has been compromised. Mint Mobile has set up a special customer service number for those who have questions about the data breach. This number is (949) 704-1162.

To avoid a repeat of this incident, Mint Mobile says it is partnering with “independent security experts”.