Skip to content
John Binns, T-Mobile Hacker, Arrested for Data Breach

John Binns, T-Mobile Hacker, Arrested for Data Breach

First seen 28 Sep 2026, 23:08 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 28, 2026 at 23:08 UTC
  • •John Binns hacked T-Mobile, compromising data of over 40 million customers.
  • •He admitted to the breach, claiming T-Mobile's security practices were inadequate.
  • •Binns is currently in Turkey, facing extradition to the U.S. for prosecution.

John Erin Binns, a U.S. citizen residing in Turkey, was arrested for hacking T-Mobile in 2021 and allegedly selling data of over 40 million individuals. Binns admitted to breaching T-Mobile's systems, claiming the telecom's security was inadequate. He reportedly used various online handles to sell the stolen data on dark web forums. The indictment details that Binns gained unauthorized access to T-Mobile's servers and installed backdoors for future access. Turkish authorities approved his extradition to the U.S. after resolving diplomatic issues. Binns expressed skepticism about his extradition, citing ongoing administrative issues regarding his citizenship status. The hacking incident reportedly began in December 2020, with Binns accessing sensitive customer information stored on T-Mobile's servers. The current status indicates that he is awaiting extradition to face charges in the U.S.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2020-12-01
Binns begins hacking T-Mobile
John Binns allegedly started using tools to scan T-Mobile's networks, leading to unauthorized access.
The Desk
2021-01-01
Data breach occurs
Binns reportedly gained access to T-Mobile's servers, compromising customer data.
404 Media
2026-09-28
Binns arrested in Turkey
John Binns was arrested by Turkish authorities following an extradition request from the U.S.
The Desk

More articles in this cluster (2)

Following this threat?

Track T-Mobile in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed