Overview
- T‑Mobile published its report Advancing Cybersecurity at T‑Mobile on Nov. 2, 2026 that says successful SIM swap attacks and employee phishing compromises have each fallen by more than 99% since 2022.
- The company moved nearly its entire workforce to passwordless FIDO2 hardware security keys and requires identity verification with a selfie and government ID before granting system access.
- T‑Mobile deployed a hybrid zero‑trust platform across employees in six months and reports the system has blocked more than 6 million online threats while overall attempted intrusions rose about 37% and credential‑based attempts fell about 35%.
- Customer protections include SIM Protection and Port‑Out Protection plus network tools that blocked nearly 3 billion scam and spam texts in 2025 and that have helped stop more than 160 billion unwanted calls since 2017.
- The company says it contained the late‑2024 Salt Typhoon intrusion before sensitive customer data was exposed, plans continued investment and industry cooperation with CISA, C2 ISAC and CTIA, and the report’s company‑sourced metrics coincided with a roughly 1.95% rise in T‑Mobile shares.