T-Mobile Physically Disconnects Compromised System to Expel Chinese Hackers
In early 2024, T-Mobile's cybersecurity team identified and expelled a group of hackers linked to the Chinese government from its network. The intrusions were part of an industry-wide campaign by Salt Typhoon, which targeted phone companies, internet providers, and data centers across the U.S., including AT&T, Verizon, Viasat, Charter, and Windstream. T-Mobile managed to avoid a large-scale breach due to early detection efforts. After months of unsuccessful attempts to locate suspicious activity within its network, T-Mobile's team discovered unusual behavior originating from another telecom company’s router. In response, the cybersecurity chief Jeff Simon led a small group to physically cut the cable connecting the compromised system in Bellevue, Washington — effectively isolating it from external access. The incident highlights growing concerns over state-sponsored cyber threats and underscores the importance of proactive security measures within critical infrastructure sectors.
Tickers: $CHTR $T $TMUS $VSAT $VZ
Topics: China cyberattack cybersecurity Salt Typhoon Security