One Reddit user claimed he observed the takeover of his email, financial and multi-factor authentication app accounts due to a SIM swapping attack, which is when a fraudster persuades mobile carriers to port a customer’s phone number to the attacker’s mobile SIM card.
Google has yet to clarify which primary network provider was involved in the underlying breach, but the timing suggests it was T-Mobile, which recently disclosed a breach impacting 37 million customers.