Q Link Wireless, the US telecommunications company responsible for providing free wireless services to Lifeline-eligible American consumers, is alleged to have provided user information to anyone who knows a customer’s phone number. It is alleged that the low-cost wireless and data service provider gave sensitive account information to 2 million US customers to anyone who knew a valid phone number on the operator’s network.

Since December, or possibly much earlier, the Q Link Wireless app, called My Mobile Account, displays information such as account name, ID, email, contact number, account address, and others for each account whenever it is presented with a valid Q Link Wireless phone number without a password.

For more information, read the <a href=”https://arstechnica.com/information-technology/2021/04/no-password-required-mobile-carrier-exposes-data-for-millions-of-accounts/” target=”_blank” rel=”noopener”>original story</a> in Arstechnica