Account Security Concern — 355+ Open Ports Scanning “T-Mobile.com” — Severe Third-Party Control
My family and I have undergone a serious security breach from account opening in September 2023 to present. I have taken to network security websites and tools to try to determine the cause of the problem that is keeping persistent connection from a third-party on my mobile lines Recently I did a Port Scan for the domain “T-Mobile.com” and found that there is at least 355 open ports (and 10’s of thousands of identified, closed, or blocked ports). This is very much out of the norm for any other domain I scan (having only 3-5 open ports). I am seeing Port 11 (sysstat - active users), 9040, 9050 and 9051 open for tor transport, 12345 and 12346 for backdoor Trojans onto our devices, among many other seriously concerning ports Threat actors have enabled third-party licensure and tools for our accounts which forbid security and privacy. Every bill’s text and call log activity is 90% unrecognizable activity. It is strongly believed my phone lines and all activity on them are being shared. When I go into the store, the IMEI numbers showing are not the ones belonging to my devices. There is also an unremovable “managed network” under settings and then Wi-Fi and then saved networks that has always been there and is there when I put my eSIMs or physical SIM cards on any device and goes away when I turn the eSIM off or take the card out. The account is sole-owner, and no credentials have been given out to anyone, ever It also sounds like, from what I heard in store, simply closing the account and creating a fresh one is not an easy process. We have changed numbers and transferred phone service providers two times already and I do not want to do it again if I don’t have to. The crime has survived for almost two years now, and I believe my information and my family’s information was leaked How do I stop this? I don’t know how to close ports or reassign the IP address designated to t-mobile.com. I’m really not sure what to do, but would really appreciate the help Thanks!
Delete credit/debit card information permanently
I connected more than one card to my account for autopay and deleted most of them. How can I ensure the card information is permanently deleted so it’s not at risk if another data breach happens? Do I need to submit a GDPR or CCPA request as a current customer?
Can someone explain "Updated Terms and Conditions will take place May 15, 2023" in plain English?
Okay, so I read the summary about these changes, which include things like: “Most notably, the changes: Include additional details about our informal dispute resolution process, including what information need to be included in the Notice of Dispute to begin that process. - Is this “informal dispute resolution process” customer friendly or is it a bureaucratic nightmare where you can’t win? And: “Provide more details about, and in some cases changes to, the rules and process governing any arbitration between us, including how the arbitrator is selected and what the arbitrator is permitted to do, our respective responsibilities for the payment of arbitration filing fees, and the relief that the arbitrator may grant.” - Okay, what are the important details? Will the arbitrator be more biased against the customer? “Your account may still incur charges (that you are responsible for) while suspended and if your Service is reinstated, you may be charged for the reconnection.” - This sounds bad. How bad is it? I don’t know how to make heads or tails of all this vague information and I don’t have time to read into all the fine print. From a third party perspective, are these changes in the terms and conditions a negative change, a positive change, a mix of both, or is it all largely irrelevant? What are the things I need to know as a T-Mobile customer?
Ported my number to join my roommates plan; he wont allow me to have access to my line!
I did not think someone could take over my line by just adding me to their plan? I went into a corporate store and found out that I had to wait 60 days to put in for a transfer of liability but my problem is this…I noticed someone accessed my phone number/line and would notice that in the call logs/text logs at times where I would be asleep or not on my phone texting those numbers. When I mentioned that to my roommate, he gave waited 3 days to add me as an authorized user, then, barred me completely the same night and I do not think that is legal. I am finding an out what my options are; and will file this with the appropriate government/telecommunications agency—but if this sort of thing happens, and I lose access to my accounts and finances, school email and other personal and private logins tired to that phone number…what can I do? I’m sure this sounds very random, or dramatic for no reason — but I have reason to believe this may not have been my been in my best interest so I could be susceptible to my roommates on what I can do? PS— A few days after getting the line, I noticed an login saying I could use DIGITS, and it was activated. I mentioned that and he said he had not idea. 😒 Let’s hope this isn’t anything more than my precautions. -ChicagoJB
