T-Mobile says hackers stole data on 37M customers

This parenthetical seems unnecessary:

> Some basic customer information (nearly all of which is the type widely available in marketing databases or directories) was obtained, including name, billing address, email, phone number, date of birth, account number, and information such as the number of lines on the account and service plan features.

I wonder if "service plan features" includes whether a customer has enabled the Account Takeover Protection feature that's supposed to guard against SIM-swapping.

[1]: https://www.t-mobile.com/news/business/customer-information

That time of year again already?

> The company said the API abused in this security breach did not allow the attacker to gain access to affected customers' driver's licenses or other government ID numbers, social security numbers/tax IDs, passwords/PINs, payment card information (PCI) or other financial account info.

In all seriousness this sounds like a relatively limited breach, so that's good at least.