Got Dark Web Alerts my SSN & DL are Out from T-Mobile Hack

[Credit_hawk]

Hey guys,

Well, it's finally happened to me. I've had some data here and there compromised but never my SSN, DOB, driver's license number and address in one shot. Thanks T-Mobile! The worst part is I'm not even a current T-Mobile customer. It's from an account I had for a few months back in 2006. Apparently they love to hold onto data of customers from even 15 years ago. I got my info compromised from Equifax a few years ago but the data never actually hit the dark web. 

So now what? Part of me is nihilistic that this is the name of the game in the 21st century and to just be alert and keep it moving. The other part wants to go into lockdown and sue T-Mobile and curse them to hell lol. I don't even have locks on my accounts right now. I've never used them. Should I? Is there a downside? 

I know I'm not the only one this has happened to here. What should be my concern level? Love to hear any personal stories and advice. Thanks!

[TryingtoBeLifeGoals]

This just happened to me with old information. Now that you said T-MOBILE it all makes sense to me. I locked all 3 credit files and also put fraud alerts on them as well. 

[Brian_Earl_Spilner]

Got the same message. I iced everyone except EX. Having difficulty with them.

[SUPERSQUID]

The last dark web alert i got from myfico included recommended instructions on what to do next.

It recommended i change all my passwords on every online account i had, i did it.

[xenon3030]

After EQ issue, and consider it as an example, it is better to be very conservative regarding data and identity protection possibly FOREVER.

Some banks even suggest to change account and email passwords every 3 months (on top of 2 step verification, credit lock, credit monitoring, etc).

[Anonymous]

Hi. I just got this alert, too. I have never been a tmobile customer. The info online is my SSN, DL from Colorado and the cell I had (I haven't lived there in 15 years), and maiden name (changed 10 years ago). The state says DC though. Never lived there. I went ahead and froze all my credit bureaus. I change the passwords to my important accounts every month or two and none of them share the same password. I also have different emails and a google number for different types of accounts. The discharged Chapter 13 may still be there, but I worked too hard the last four years to get my scores from the 400s to the 700s so I could buy a house and a new car for someone to use my credit. I hope all this is enough.

[Caribsa89]

I just received the same message from Experian IdentyWorks.  They found my Social and DL also.  They specifically told me it's from T-Mobile.  I have not been a T-Mobile customer since the end of 2012!  I've had my e-mails compromised before but never my Social and DL.  I'm so upset!  I just finished adding a security freeze on all 3 credit bureaus since they had my correct zip code (address). The only thing that was incorect was the phone number; I've changed my phone number in 2014.

[jrwa81]

I received an alert from my Experian app tonight that some of my personal information was found on the "dark web."  I logged into my Experian and found that my social security number, cell phone number, email address, and even my driver's license number were all discovered on the dark web and it said the potential site that my information was leaked from was T-Mobile's website and that the breach occurred last August.  

How concerned should I be at this point?  I know absoulutely nothing about the dark web, other than the fact that it exists and that nothing good ever happens on it.  My husband and I are in the process of getting ready to start shopping for a new home, so the last thing I need right now (or ever) is a case of identity theft ransacking my credit.  Should I be contacting T-Mobile about this since it says the info came from their site?  We are T-Mobile customers, so we do have an account with them for our wireless service.  I always watch my credit like a hawk, but is there anything else I should be doing to protect myself?  Experian says that I should lock my credit file, but we are getting ready to put in a mortgage application in the next few days and we're already working with a loan officer, so I can't exactly do that right now.

Any advice would be greatly appreciated!

[CH-7-Mission-Accomplished]

---

@jrwa81 wrote:

I received an alert from my Experian app tonight that some of my personal information was found on the "dark web."  I logged into my Experian and found that my social security number, cell phone number, and my driver's license number were all discovered on the dark web and it said the potential site that my information was leaked from was T-Mobile's website and that the breach occurred last August.  

How concerned should I be at this point?  I know absoulutely nothing about the dark web, other than the fact that it exists and that nothing good ever happens on it.  My husband and I are in the process of getting ready to start shopping for a new home, so the last thing I need right now (or ever) is a case of identity theft.  Should I be contacting T-Mobile about this since it says the info came from their site?  We are T-Mobile customers, so we do have an account with them for our wireless service.  I always watch my credit like a hawk, but is there anything else I should be doing to protect myself?  Experian says that I should lock my credit file, but we are getting ready to put in a mortgage application in the next few days and we're already working with a loan officer, so I can't exactly do that right now.

Any advice would be greatly appreciated!

---

You should immediately lock/freeze your credit reports with all three credit bureaus and also ask them to place an extended fraud alert on your account.   It will remain for six or seven years.   It just advises potential creditors that they should call you and also get additional ID before opening any credit in your name.   It's a PITA when you are applying for credit, but it's a lot less onerous than dealing with identity theft.

[TattnallTrio]

I'd agree. Place the Fraud Alert immediately and also lock your credit files. I lock Experian in the Experian App, Equifax has a Lock and Alert app, and TransUnion I go on their website. 
I've also locked Chexsystems, SageStream and Innovis and they also lock LexisNexis. 
Your information has been stolen but locking it will help prevent the thieves from opening new accounts in your name.