T-Mobile has suffered one other cyberattack after being rocked by a large information breach in August. This time round, attackers accessed “a small number of” prospects’ accounts, in response to documents posted by The T-Mo Report.

According to the report, prospects both fell sufferer to a SIM swapping assault (which might permit somebody to bypass SMS-powered two-factor authentication), had private plan info uncovered, or each. The doc exhibits that the shopper proprietary community info that was considered might’ve included prospects’ billing account title, cellphone and account quantity, and information about their plan, together with what number of strains had been connected to their account.

This summer time, the provider confirmed {that a} information breach uncovered virtually 50 million prospects’ information, with the attacker accessing social safety numbers, names, and dates of delivery. (An individual who claimed to be the hacker went on to name the corporate’s safety practices “awful.”) The info reportedly uncovered in December’s breach is much less delicate (and the paperwork say the purchasers who had their SIMs swapped have regained entry), and is probably going not as massive in scope. We weren’t capable of finding widespread studies from prospects that stated they’d obtained notification letters.

T-Mobile’s help account has seemingly confirmed that there was a breach, responding to folks on Twitter to say that it’s taking “immediate action” to assist people who had been put in danger by the assault. The firm didn’t instantly reply to The Verge’s request for remark.