In 2024, T-Mobile’s cybersecurity team identified and expelled Chinese government-backed hackers from its network. The group, known as Salt Typhoon, had infiltrated numerous telecommunications companies, internet giants, and data center providers, aiming to collect phone records and information on senior U.S. government officials, including then-presidential candidates.
After months of investigation, T-Mobile detected unusual activity on one of its systems, traced back to a router belonging to another telecom company. To immediately sever the hackers’ access, T-Mobile’s cybersecurity chief and his team physically cut the cable connecting the compromised system to the network.
This decisive action highlights the persistent threat posed by state-sponsored cyberattacks and underscores the importance of proactive and sometimes unconventional measures in safeguarding critical infrastructure. Organizations must remain vigilant and adaptable to effectively counter such sophisticated threats.
