Incident

Telecom Services of Trinidad and Tobago hacked, 6GB customer data exposed


Learn More

The Telecommunications Services of Trinidad and Tobago (TSTT) suffered a significant data breach on October 27, 2023. The compromised domains were tstt.co.tt and bmobile.co.tt. The ransomware used in the attack was RansomEXX, also known as Defray777

The warning on the Defray777 site emphasized TSTT's alleged negligence, accusing them of allowing the leak of customer data, causing network disruptions, and charging customers despite these compromises.

The cyberattack resulted in the theft of approximately 6GB of data, encompassing

  • customer names,
  • addresses,
  • emails,
  • national ID numbers,
  • ID scans,
  • phone numbers.
  • gitlab projects amd code

The Telecommunications Services of Trinidad and Tobago has not reported the incident on their website. Details about the number of affected individuals or about the attack are not available.

Update - TSTT has stated that the compromised data includes several personal details such as first and last names, email addresses, home addresses, a limited number of ID scans, specific customer account information such as account numbers, billing addresses, some mobile numbers, as well as documents like letters of authorization which allow individuals to transact with TSTT on a customer's behalf, and payment receipts. However, TSTT assures that the breach did not involve access to call records, transactional data, customer passwords, credit card details, or any financial information.

Telecom Services of Trinidad and Tobago hacked, 6GB customer data exposed