Google Fi emailed customers to disclose that their account data was included in the more than 37 million customer records stolen from T-Mobile in November 2022.
Google Fi is a wireless plan that runs much of its service on T-Mobile networks.
Google Fi customer details, including phone number, SIM card serial number and service plan details, were among the data stolen from T-Mobile.
Google added in its email that the compromised information did not contain “your name, date of birth, email address, payment card information, social security or tax IDs, driver’s license or other form of identification. government, or financial account information, passwords, or PINs that you may use for Google Fi or the content of any text messages or calls.”
However, Lior Yaari, CEO and co-founder of Grip Security, noted that would-be cyberattackers can still do a lot of damage via SIM card swapping, gaining access to users’ phone numbers and serial card numbers. SIM.
“At a minimum, affected customers should consider changing their SIM card to protect themselves,” he said by email. “Once hackers get your phone number, they can use it for illicit purposes, or even bypass the two-factor authentication that uses SMS.”
Google Fi has not noted the number of customers affected.
“Given the severity and impact of the breach, it’s surprising that Google hasn’t disclosed the number of customers affected, like what we’ve seen in other major breaches,” Yaari said. Google did not immediately return a request for comment.
T-Mobile’s latest data breach marks the second in two years for the mobile operator.