technology

Hackers sell 6.3 million verizon records for the price of a used iphone

Seventy-five bucks per gigabyte. That’s the insult-to-injury math behind the Russell Cellular breach: 61 GB of Verizon subscriber and staff data, yours and mine, is sitting on a hacker forum for $1,200—less than a weekend in Nashville.

A quiet empire of 750 stores suddenly went loud

Russell Cellular isn’t a mom-and-pop kiosk in a strip mall; it’s Verizon’s biggest authorized retailer, stretching from Maine strip malls to California outlet centers. The breach leaks everything short of your Social Security number: full names, phone numbers, email addresses, account PINs, even the internal job titles of store employees. One file sample, vetted by Cybernews, pairs a district manager’s Outlook credentials with a spreadsheet of 87 corporate Verizon email addresses. Translation: the attackers didn’t just walk through the front door—they were handed the master key ring.

Verizon’s spokesperson confirms the carrier is “actively investigating,” yet Reddit forums lit up with claims that Russell Cellular still hasn’t forced a company-wide password reset. Employees discovered the hack when their discount portals began greeting them in Cyrillic. Customers learned about it from Twitter, not from the retailer that stores their driver’s-license scans.

Why this one stings more than the usual telecom oops

Why this one stings more than the usual telecom oops

Because authorized dealers live in a regulatory gray zone. They wear Verizon blue, run Verizon systems, but operate under looser data-handling rules than corporate stores. When a corporate server coughs up credentials, SEC filings fly and senators tweet. When a dealer springs a leak, the fallout lands on Yelp reviews and anonymous Pastebin posts. Russell Cellular’s silence feels strategic: admit nothing, patch quietly, hope the news cycle drowns in the next iOS update.

The timing is brutal. Verizon just finished marketing its new “Custom 5G” plans with a side dish of personalized account dashboards—the same dashboards now circulating on Telegram channels for $50 a pop. Every SMS PIN, every birthday promo, every “we value your privacy” footer becomes punch-line material.

What to do before your next bill arrives

What to do before your next bill arrives

Change your My Verizon passphrase—yes, even if you’ve never set foot inside a Russell store; dealers share backend portals. Turn on two-factor authentication using an authenticator app, not SMS, because phone numbers are now tainted fruit. Freeze your credit file; the leaked data includes enough detail to pass carrier identity checks. And walk into a corporate store for your next upgrade. The line is longer, but the attack surface is smaller.

The hackers will cash out quickly—data this fresh has a half-life measured in days, not months. Russell Cellular will rebrand its privacy page and offer two free months of identity monitoring. Verizon will remind us that “security is a shared responsibility.” The rest of us are left with a blunt lesson: in the prepaid-and-prayer economy of American wireless, your personal information is only as safe as the weakest mall kiosk.