T-Mobile confirms Lapsus$ hackers breached internal systems

Its a total shit show at TMO and AT&T, both getting hacked still today. The forums are filled with people getting their accounts hacked, charges ran up, caller ID changed, still today. The legacy systems built for certain features are no longer maintained, and get backdoored into the core systems. The article says they did this thru test labs.

Legacy Tech Debt is a major security risk, unsupported, people who know how the systems leave, contractors move on.

And TMO 2FA is a joke, with 2FA enabled, and they still allow the option to email/sms you. That should be a rep only bypass, in store, verify by ID.

Security holes from top to bottom at these carriers, and we suffer for it. They really are not taking it seriously.