Hackers have posted a database allegedly containing 64 million T-Mobile customer records, but the telecom giant insists there’s been no breach, igniting a firestorm of speculation about whether this data is real—or recycled from prior leaks.
At a Glance
- A dark web post claims to expose 64 million T-Mobile customer records, including personal and device identifiers.
- T-Mobile denies any breach, stating the sample data doesn’t match internal systems.
- Cybernews analysts note a mix of recycled and potentially new data.
- The leak has not yet been verified by watchdog site Have I Been Pwned.
- Experts recommend proactive identity protection and password updates.
What Hackers Allege
A new listing on a dark web forum claims to offer a massive trove of personal data—names, email addresses, phone numbers, Social Security numbers, and device IDs—allegedly sourced from T-Mobile’s customer base. The seller asserts the information is current as of June 2025, adding urgency to growing privacy concerns.
T-Mobile Pushes Back
T-Mobile responded forcefully, saying there is “no indication that a breach occurred.” A company spokesperson told PhoneArena that the leaked data “does not match T-Mobile’s format or customer structure,” calling the claims “misleading.” The company maintains its systems remain uncompromised.
Experts Remain Cautious
While some Cybernews analysts observed overlaps with previous breaches, certain fields and email entries appeared new, raising the possibility of a composite leak rather than a singular recent breach. As of now, the respected breach monitoring platform Have I Been Pwned has not flagged this dataset, further casting doubt on its legitimacy.
What Users Should Do
Regardless of confirmation status, users are advised to take precautions:
- Use sites like Have I Been Pwned to check for personal data exposure.
- Immediately change T-Mobile account passwords and PINs.
- Enable two-factor authentication.
- Consider using identity theft protection or credit monitoring tools.
As previous T-Mobile data breaches have proven costly, both to consumers and the company, vigilance remains crucial—even amid denials.
