Controversies

Company response

• Investigation — USCellular

  At this point, more investigation needs to be conducted as USCellular is still not certain about the source of the hacking.

• Remediation — USCellular

  Following the incident, USCellular got rid of the computers involved in the scam for further investigation. They also reset employee's passwords.

• Ongoing disclosure — USCellular

  USCellular also reached out to affected customers that they have reset their authorized contact PIN and security questions to prevent further data access.

Source excerpt

• According to Bleeping Computer, the software turns out to be a malware that allowed the hackers to access US Cellular's computer remotely.

• USCellular, the fourth largest mobile network operator in the United states has suffered data breach after attackers hacked its Customer Relationship Management (CRM) software and gained access to customer's accounts and phone numbers.

• The data breach notification says "since the employee was already logged into the customer retail management ("CRM") system, the downloaded software allowed the unauthorized individual to remotely access the store computer and enter the CRM system under the employee's credentials."