4 ms·
Tell HN: T-Mobile breach- double fuck up
I work for Metro by T-Mobile. Our store computers run thin clients operated by T-Mobile and the internal account management software EDGE fucked up the internal memo disclosing the recent data breach.
Upon accessing a cx account today I see the following memo:
————
High Priority Memo | Created by 11111 on 20-Jan-2023)
Customer received the following SMS notification: IMPORTANT: Some of your account information was obtained without authorization. Passwords, SSN, payment methods were NOT affected. Your name, # of lines, contact details and other account information may have been. Learn more: metro-tmo.co/CustInfo. See https://www.metrocare-agent.com/announcements/<Redacted>…
————
First off, “metro-tmo.co” is a spam domain that isn’t owned or operated by T-Mobile. Not only could the person who wrote this memo fail to write complete English sentences, but they fail to link the correct domain to the announcement regarding their own data breach. as of this current moment, their internal account memo system continues to link this incorrect spam link. and to make matters worse, they even sent this spam domain to potentially millions of customers phones via sms.
- mtmail 4y agoSo the customer got SMS spam from a third-party and there was no T-Mobile breach? The fuck up is the spammer makes spelling mistakes?
- TmoSecuritySux 4y agoNo, whoever is in charge of writing High Priority Memos on cx accounts at Metro by T-Mobile / T-Mobile Corporate made a typo in the Memo itself which links to a spam domain. The memo also claims this exact message was also sent to customers phones. Typo URL in internal account memos + texts sent by the company to subscribers : http://metro-tmo.co/CustInfo http://metro-tmo.co/CustInfo Actual legitimate URL they meant to put : http://metro-tmo.com/CustInfo http://metro-tmo.com/CustInfo
- winternett 4y agoIf only one of these data breaches led to account balances getting wiped, THEN we'd see big changes. :/
- deleted 4y ago[deleted]
- readonthegoapp 4y agodidn't Metro shut down?
- stonogo 4y agoWho would OP be working for in this scenario?
- mr3martinis 4y agoT-Mo, under the metro brand.
- TmoSecuritySux 4y agoIt’s a bit complicated. I work for a Metro Authorized Dealer(basically, a franchise). About 98% of Metro stores are Dealer-owned and 2% are Corporate. operationally, the upmost level we are ultimately beholden to controlled by, and at the mercy T-Mobile leadership (who regularly fines Dealers for the most trivial of things, has unrealistic expectations and as such I’d say half of Metro stores are operating at a loss and several thousand already shuttered in the last few years). T-Mobile leadership has autonomy to fire any Metro Authorized Dealer employee or revoke the Dealer at will. So basically as an employee I’m subservient to T-Mobile leadership and use T-Mobile Enterprise equipment & software but I don’t actually work for “T-Mobile” proper.
- simfree 4y agoFranchisees shouldn't have their Franchisor making hiring and firing decisions, that just seems legally dubious given the franchisee is supposed to be a separate (but affiliated) company.
- TmoSecuritySux 4y agoMetro by T-Mobile “Authorized Dealers” aren’t legally considered “franchises” as such.
- zinekeller 4y ago
- azgolfer05 4y agoI received this text just now, is this a scam??
- leowrlds 4y agoi think so, otherwise some shit would've happened.
- llZielll 4y agoI did so as well, so I’m wondering if it’s a scam.
- TmoSecuritySux 4y agoYou received it 2 hours ago? That’s nice. I called my at Metro T-Mobile Corporate district managers (but actually they were actually just fired The other day, DDMs and even the higher level Zone Managers too-this is public knowledge and news can be found on Google) - so they were of no help) attempted to file a formal security incident ticket through our normal escalation horline regarding is issue 10 hours ago and was told they were already aware.
- TmoSecuritySux 4y agoIt’s an accident. Who owns that “metro-tmo.co” doesn’t seem to have realized this mistake quite yet? no doubt is getting tons of clicks to their parked adspam site. I can picture this being resolved by buying out or seizing-via-legal-injunction the metro-tmo.co domain under trademark law. may be too late to “unsend” the texts.
- propogandist 4y agothe website does not resolve for me, but if it has adspam, serving targeted text add (contextual) can be a big money maker for a clever marketer
- anonomousename 4y agoIt could also be changed to a copy of the official T-Mobile site, resulting in widespread phishing.
- _8j50 4y agoJust fyi: they usually (but not always) do that incomplete sentence and bad spelling/grammar on purpose, so as to lure less "smart" people into pwnage (myself included lmao)
- function_seven 4y agoExcept in this case the message was really written by T-Mobile. They just messed up the domain.
- cakefacebrit 4y agoJust received a text not even 5 mins ago. The exact message as above. I’m going to report it everywhere I can in hopes to help maybe we can all get these people shut down!
- SantaFeSlayer 4y agoI just received the same text at 20:47 last night, 20230124, but it was ".com", not ".co", so I guess it has been fixed.
- GETRIDOFTMOBILE 4y ago[flagged]