American telecommunications company T-Mobile announced a significant decline in cyberattacks, confirming that successful SIM swapping operations against its customers have decreased by more than 99% since 2022. This announcement comes in a new digital safety report issued by the company, highlighting the results of wide-ranging improvements it has made to its security infrastructure to curb frequent breaches it faced in the past.
These improvements are mainly attributed to tightened identity verification measures, the adoption of biometric verification technologies, and the activation of additional security features such as SIM Protection and Port-Out Protection. These steps represent a vital shield for users, given that mobile numbers have become like master keys for accessing digital accounts and bypassing two-factor authentication systems based on text messages.
Protecting Employees and Countering Advanced Threats
Security development was not limited to customer accounts alone; it also included the company's internal side, where employee credential compromise operations associated with phishing attacks also recorded a decrease of over 99%. This came after the company transitioned to a password-free authentication system using standard physical security keys from the FIDO2 category.
Furthermore, the report revealed other prominent milestones, including blocking billions of fraudulent messages and calls over recent years, in addition to the success of the Zero-Trust security platform in preventing millions of internet threats. The company also claimed that its cyber defenses successfully stopped the hacking group known as Salt Typhoon and prevented them from accessing sensitive customer communications during an intrusion attempt in 2024.
Ongoing Challenges Despite the Decline in Breaches
Despite the noticeable drop in the rate of successful attacks, the company's report indicated that threats continue at a concerning rate; failed or detected hacking attempts against the company's systems increased by 37% during the last 12-month period. This discrepancy illustrates that cyber attackers have not stopped attempting to breach the infrastructure, while the company strives to establish user trust by proving its ability to thwart those advanced attempts thanks to its new technical investments.