Here’s what we know about the giant cyberattack so far:

What happened?

T-Mobile sayscybercriminalscompromised its systems and stole the personal information of current, former and prospective customers.

The company initially said the attack, which it confirmed onAug.

In some cases, IMEIs and IMSIs, which identify devices and accounts, were taken.

Someaccount PINSwere also stolen.

Who’s to blame?

As with all cyberattacks, figuring out who did it can be tricky.

The Journal reported that it remains unclear whether Binns was working alone or with others.

It also reported that the Seattle office of the FBI is investigating.

T-Mobile is headquartered in nearby Bellevue, Washington.

What’s T-Mobile doing about it?

T-Mobile said it’s tasked Mandiant with developing a strategic plan to boost its overall cybersecurity operations.

KPMG will review T-Mobile’s security policies to identify gaps and areas that need to be improved.

What about the people affected?

It’s also in the process of attempting to reach all the affected former and prospective customers.

The company has also reset PIN numbers for all prepaid customers after the exposure of 850,000 accounts.

How can I protect myself?

Once your personal information has been compromised, there’s really no getting it back.

The best you could do is try tokeep tabs on it.

Taking T-Mobile up on itsoffersof identity theft and account takeover protection can help with that.

Meanwhile, people who’ve had their Social Security number stolen shouldfreeze their credit.