“The number of exposed individuals and SIM-swapping incidents have been censored in the public version of the Consent Decree document.”
Attackers sat in TracFone customer data from January 2021 and used it to approve unauthorized number port requests. TracFone noticed in December 2021. Two more breaches hit its order websites by January 2023, and the attacker switched methods when the first one was blocked. Verizon pays $16 million to the FCC, and the people whose numbers were stolen don’t even get to know how many of them there were.