An unsecured T-Mobile website made customer information available to anyone

If You Like, Please Share

An API on a T-Mobile domain intended for employees could have let anyone view customer information, so long as they typed in a phone number.
Read More