
Around 37 million T-Mobile customers recently had their personal information compromised when a hacker breached the wireless carrier's database.
In a filing with the Securities and Exchange Commission on Thursday, T-Mobile said the data breach happened in late November but was just discovered on January 5. Within a day, the company says it was able to trace the source of the "malicious activity" and stop the breach.
The stolen information includes names, addresses, emails and phone numbers of customers, as well as their account numbers and plan details, the company said. Customer credit card information, passwords, Social Security numbers and driver's license numbers were not accessed.
"Our investigation is still ongoing, but the malicious activity appears to be fully contained at this time, and there is currently no evidence that the bad actor was able to breach or compromise our systems or our network," the filing says.
T-Mobile said it has notified federal agencies about the incident, and is "working with law enforcement." It has also started notifying customers whose information may have been stolen.
T-Mobile doesn't expect the hack to impact company operations, but admitted it is "unable to predict the full impact" of the incident. It also expects to incur "significant expenses" as a result of the breach.
After the breach was announced, the company's stock dropped nearly 1.5% in after-hours trading Thursday to $143, according to Forbes.

The company has been hacked multiple times in recent years. Last July, it agreed to pay $350 million to settle a class action lawsuit by customers who had their personal information stolen during an August 2021 breach. Roughly 76.6 million customers were affected.
As part of the settlement, T-Mobile committed to investing $150 million in data security and related technology through 2023. Since then, the company has made "substantial progress" in strengthening its cybersecurity program, according to the SEC filing.
"In 2021, we commenced a substantial multi-year investment working with leading external cybersecurity experts to enhance our cybersecurity capabilities and transform our approach to cybersecurity," T-Mobile said. "Protecting our customers' data remains a top priority."