credential hygiene

T-Mobile API Scraping 2023: 37M Accounts, One Credential

Post author:Hmmnm
Post published:January 19, 2023
Post category:Identity & Phishing Security Web & API Security

A single compromised API credential let an actor scrape ~37 million T-Mobile accounts over six weeks. Machine-identity governance lessons from a repeat offender.