T-Mobile employees sold data from thousands of customers

By Dave Bailey

18 Nov 2009

Comment: 1

A Computing logo
Customer data
Thousands of customer records sold

A spokesman from T-Mobile confirmed today that the mobile operator had passed on data from thousands of customers amounting to millions of records.

Information Commissioner Christopher Graham was alerted by T-Mobile, which admitted that brokers paid for the data which they subsequently sold on to other companies. These companies then used the data to call T-Mobile customers whose contracts were due to expire.

Further reading

Managing director of UK leading independent mobile phone comparison site www.rightmobilephone.co.uk Neil McHugh said that his advice for people worried about their personal data was to call their mobile phone operator and ask for confirmation that their contact information was safe.

“Only people coming to the end of their mobile phone contracts are likely to be contacted as a result of the data leak, but if a network operator is responsible, I’m sure the consequences will be severe. Not just facing a potential fine but a huge decline in customer trust,” he added.

T-Mobile’s spokesman said the data was sold, "without our knowledge".

Graham’s team obtained search warrants to enter premises and are reported to have interviewed T-Mobile employees. A statement on the Information Commissioner's Office (ICO’s) web site said the following: “The existing paltry fines for Section 55 offences are simply not enough to deter people from engaging in this lucrative criminal activity. The threat of jail, not fines, will prove a stronger deterrent.”

Reader comments

Insider Data Breaches Happen Far Too Often

Companies need to have a strong access management strategy in place to protect all critical applications and data ? especially customer databases ? and further need to ensure that the access strategy and corporate policies are being adhered to across the business.

Insider data breaches like these rear their ugly heads far too often, and it's important for enterprises to ensure that they aren't simply trusting their employees to do the right thing, but also utilising automated preventative and detective controls to keep everyone honest.

Posted by: Stuart Hodkinson, General Manager, Courion  19 Nov 2009

Have your say on this article

All fields required. Your email address will not be displayed on the site.

By submitting a comment you agree to abide by our Terms & Conditions

  • Digg
  • Tweet

Newsletters

Sign up for our FREE newsletters

Will Google’s new privacy policy impact how you use its services?

Google recently said will consolidate more than 60 of its privacy policies into one, unifying customer data across most of its products. The announcement has met with a backlash in the US, while EU officials have asked Google to put its plans on hold so it can assess the privacy impact for users. Will you consider not using Google in the future as a result?

83 %

5 %

1 %

11 %