An AT&T store worker swapped customers' SIMs for cash. One victim lost $99,528.
A former AT&T retail worker in Portland, Oregon used store access to swap customers' SIMs for cash, The Register reported.
The Register said the worker was sentenced to 16 months in federal prison and ordered to pay $99,528 in restitution, having in March admitted a charge The Register described as "conspiracy to commit wire fraud and bank fraud".
According to The Register, the worker moved victims' phone numbers onto handsets held by accomplices. They then intercepted the SMS codes that banks send as a second factor.
Prosecutors put the intended loss at $593,963.77 across three victims. One transfer of $99,528.33 went through. The banks' own checks stopped two more transfers, of $247,652.74 and $246,782.70.
The worker said the payment was under $4,000 in total and that the activity seemed harmless. Prosecutors said there was insufficient evidence for that account.
Nothing in the source describes a technical break-in. The Register describes a retail employee using valid store access to make a change no second person had to approve.
Which of your standing roles can move a customer identity on their own?
Sources
Our file on AT&T
All 2 AT&T storiesEvery story here is open to read. The ERP LEADERS brief goes one step further.
The day in enterprise software, in one email: the stories that matter, the failures with their figures, one case taken apart. Read a sample or sign up for the brief.
Welcome back. · Issue 01
