Mint Mobile disclosed a data breach after an unauthorized individual accessed subscriber account information and transferred phone numbers to another entity.
See also: CNA reports data breach after ransomware attack
According to the data breach notification email sent to affected subscribers this weekend, between June 8 and June 10, a malicious actor transferred the phone numbers of a small number of Mint Mobile subscribers to another entity without permission.
In addition to the numbers that were transferred, Mint Mobile disclosed that an unauthorized individual also had access to subscribers' personal information, such as call history, names, addresses, email messages, and passwords.
See also: Volkswagen/Audi: Data breach affects 3.3 million customers
While Mint Mobile has not said how the threatening entity gained access to subscriber information, based on the accessible data, it is likely that hackers could compromise user accounts or breach a Mint Mobile application used for customer management.
Since the threatening actors may have obtained access to your password on Mint Mobile, it is recommended that you change your account password.
Additionally, threat actors could have used the numbers for additional attacks, such as phishing or to gain access to 2-factor authentication codes sent via text message.
See also: NSW Health: Data breach through vulnerability in Accellion system
Because of this, Mint Mobile warns affected users, telling them to “protect other accounts that use the phone number for verification purposes and reset passwords on all accounts.”
Information source: bleepingcomputer.com
