A new Class Action Lawsuit has been filed against Apple and T-Mobile over a Longstanding Security Flaw
It's being reported this afternoon that Apple and T-Mobile are facing a class action lawsuit over allegations that their failure to disclose a security issue that made it possible for third parties to access messages and video calls sent through Apple's iMessage and FaceTime apps jeopardized consumer privacy.
According to Business Insider, "The plaintiffs, Tigran Ohanian and Regge Lopez, say Apple misled customers by promoting the security of its products without disclosing a vulnerability that made it possible for strangers to access iMessage and FaceTime interactions.
The complaint was filed yesterday in the United States District Court for the Southern District of New York.
The complaint refers to an issue that prompted an Apple ID — the account required to download apps from the App Store and register Apple products with your iCloud account — to remain tied to a T-Mobile SIM card even after the iPhone owner had finished using that SIM card and switched phone numbers.
When an iPhone owner stopped using a T-Mobile SIM card, the phone number tied to that SIM card would remain attached to the associated Apple ID even after the carrier had recycled it and given it to a new customer, the lawsuit says. Because Apple IDs maintained a "legacy connection" with T-Mobile SIM cards, the previous owner of the SIM card would receive iMessages and FaceTime calls intended for the new owner.
The complaint read: "In other words, because of the legacy connection, iMessage correspondence and FaceTime calls directed to the new owner of a phone number would lead to the iMessage correspondence or FaceTime call being unknowingly and improperly misdirected to the prior owner of the phone number because of its previous association with the SIM card." the complaint says.
By not disclosing the flaw and SIM card practices, Apple and T-Mobile caused customers to become "unsuspecting victims of extensive security data breaches," the complaint says. For more on this, read the full Business Insider report or read the full SCRIBD document of the class action filing here.