Not everyone got this version of the notice. Here's a reddit user who posted [1] that they were SIM swapped:<p>> Additionally, on January 1, 2023 for about 1 hour 48 minutes, your mobile phone service was transferred from your SIM card to another SIM card. During the time of this temporary transfer, the unauthorized access could have involved the use of your phone number to send and receive phone calls and text messages. Despite the SIM transfer, your voicemail could not have been accessed. We have restored Google Fi service to your SIM card.<p>[1]: <a href="https://old.reddit.com/r/GoogleFi/comments/10pjtie/google_fi_data_breach/j6kysv8/" rel="nofollow">https://old.reddit.com/r/GoogleFi/comments/10pjtie/google_fi...</a>
A reasonable headline could state "Google Fi essentially not affected by latest T-Mobile data breach". Look at the data "breached":<p>> limited data including when your account was activated, data about your mobile service plan, SIM card serial number, and active or inactive account status.<p>> It does not contain your name, date of birth, email address, payment card information, social security number or tax IDs, driver’s license or other form of government ID, or financial account information, passwords or PINs that you may use for Google Fi, or the contents of any SMS messages or calls.<p>I mean, that's almost the minimum amount of data T-Mobile has to have to provide the service to Google Fi customers, and nothing else. The actual customer data is probably stored at Google, and is perfectly safe. The chances of someone being able to use the leaked data in a nefarious way seem practically nil.
When will T-Mobile take accountability for their repeated data breaches and fix the systemic issues? Is there anyone in the company who cares enough to do something?
The same probably goes for other MVNO carriers such as Mint and Ting. The PII and billing data is with the MVNO carriers.<p>I buy my SIM cards anonymously. I never use cellular near my house and only use it for data over a VPN. So it would not affect me if all of their data was breached.
Kind of upset that Google didn’t provide any details about the context of the breach itself in the email they sent me, just a vague “someone had a breach and don’t blame us”.
If anyone is worried about a potential SIM swap attack due to this breach, you can order a new SIM card free of charge at <a href="https://fi.google.com/ordersim" rel="nofollow">https://fi.google.com/ordersim</a>
Because it’s buried a few links deep:<p>T-Mobile detected the breach January 5 and shut it down “within a day”<p>But<p>It started approximately November 25th, so the attackers were there for at least a month and a half, pulling 37,000,000 records before anyone noticed.