Hackers breached Sprint customer accounts via Samsung's website

Shawn Knight

Posts: 12,503   +122
Staff member

Sprint is in the process of informing customers about a security breach that occurred last month.

In a letter to affected customers, Sprint said it learned of the unauthorized access on June 22, 2019. According to the nation’s fourth largest wireless carrier, hackers gained access through the “add a line” portal on Samsung’s website.

Potentially exposed data includes phone numbers, first and last names, billing addresses, device types, device IDs, monthly recurring charges, subscriber IDs, account numbers, account creation dates, upgrade eligibility and add-on services. Sprint said no other information “that could create a substantial risk of fraud or identity theft” was acquired which, technically speaking, doesn’t rule out the possibility that other, lesser information was also compromised.

The carrier said it took appropriate action to secure impacted accounts from unauthorized access. In the sample e-mail supplied by ZDNet, Sprint said it “re-secured your account on June 25, 2019” by resetting the PIN.

Sprint hasn’t revealed how many accounts were impacted by the breach, nor do we know when the breach first occurred (only the date Sprint was made aware of the unauthorized access). ZDNet reached out with those questions and more but a response was not received in time for publication.

Masthead credit: A Sprint store in the University City neighborhood by Michael Candelori


Permalink to story.



Posts: 369   +254
Among the measures to protect against fraud and identity theft, Sprint recommends to:

- Place a fraud alert on your credit reports, and review your credit reports.
- Close the accounts that you believe have been tampered with or opened fraudulently.
- File a report with your local police or the police in the community where the identity theft took place.
- Visit the Federal Trade Commission’s Identity Theft website, IdentityTheft.gov, or for more information on reporting and recovering from identity theft.
- Contact your state’s Attorney General or Consumer Protection Agency for more information on reporting and recovering from identity theft.

Hey Sprint, why don't YOU do this for your customers?