1. A store location or locations was compromised
2. January 10th was when we notified T-Mobile of the attack
3. Likely sometime between January 17th (the last successful SIM swap attack we experienced) and January 24th.
4. Who knows? T-Mobile refuses to disclose any info to the police :P