T-Mobile unplugged network equipment to thwart hacking attempt

T-Mobile resorted to an old-school method to keep its network safe.

t-mobile  Salt Typhoon attack router
Who thought snipping the cable was the answer? | Image by The Seattle Times
1
In 2024, several US telecommunication providers, including AT&T and Verizon, were infiltrated by a Chinese state-backed group known as Salt Typhoon. The bad actors came close to burrowing into T-Mobile as well, but an old-school move saved the day.

Back to basics



Jeff Simon, T-Mobile's Chief Security Officer, who has since been promoted to Chief Information Officer, revealed in 2024 that hackers had attempted to intrude on its network through a wireline company's network that was connected to T-Mobile's.

The Un-carrier detected the threat early enough to block access to customer data and severed the connection to the compromised provider's network. The carrier has now provided more details to Bloomberg.

Simon recounts how, back in 2024, T-Mobile was already vigilant due to a 2023 breach that exposed the data of 37 million customers. When employees learned of the Salt Typhoon attack, they flagged a router behaving suspiciously at a California data center. It was communicating with another T-Mobile device. When they checked on the router, it was powered off.

That's when Simon ordered the device to be ripped out. Since the shady activity couldn't have been coming from the shut-off router, they dug deeper and were then able to trace the activity to another provider's router in Chicago. It had been disguised to imitate the one in California to make it easy to connect with the other T-Mobile device, which was at a data center near the Bellevue headquarters.

Recommended For You
Simon and his colleagues drove to the location and snipped the cable connecting the device to the network using a pair of scissors.

How do you feel about T-Mobile's timely detection?
13 Votes

You can never be too careful


T-Mobile later reactivated the router in an isolated environment and analyzed it. It was too late to learn about the attackers, who were long gone by then.

While the cybercriminals weren't able to breach T-Mobile's core infrastructure or subscriber data, they did get into some other routing infrastructure on the edge of the network.

Simon could have been less dramatic and switched the router off virtually, but he says that sometimes a low-tech solution works best.


The severed cable is displayed at the company's headquarters as a badge of honor.

A high-profile attack


Access to T-Mobile's core routers could have allowed the hackers to wreak havoc by siphoning off information, redirecting traffic, and injecting malicious software. US officials believed the attack to be geared more toward intelligence gathering.

T-Mobile deserves credit


The hacker group successfully got into AT&T's and Verizon's systems, so it's commendable that T-Mobile's defenses worked to prevent penetration.

The bad actors were able to steal the phone data of millions across the US, and even targeted the handsets of Donald Trump, JD Vance, and Kamala Harris.
Six-month unlimited plan is now 57% off
$90
$210
$120 off (57%)
Mint Mobile is now allowing you to get whichever plan you like for either three, six, or 12 months for just $15/mo. If you go for the six-month unlimited service, for instance, you'll now have to pay just $90 upfront instead of $210.
Buy at Mint Mobile
Recommended For You
COMMENTS (1)