Reported by 2 outlets

Timeline

1. update from gbhackers.com

   T-Mobile Physically Cuts Network Cable to Evict Chinese Salt Typhoon Hackers

   gbhackers.com · 54d ago · August 20th, 2026

   In 2024, T-Mobile’s security team took an unusually direct approach to contain a cybersecurity threat: they physically cut a network cable to terminate suspected access by the Chinese state-backed hackers known as Salt Typhoon. According to CSN, this action came after months of incident response efforts within T-Mobile’s network, during which defenders investigated signs of […] The post T-Mobile Physically Cuts Network Cable to Evict Chinese Salt Typhoon Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

2. update from cyberpress.org

   T-Mobile Cuts Network Cable to Kick Salt Typhoon Hackers Out of Systems

   cyberpress.org · 54d ago · August 20th, 2026

   T-Mobile’s cybersecurity team reportedly used an unusually direct response to evict suspected Chinese state-backed intruders in 2024: it physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move followed months of investigation into activity linked to Salt Typhoon, the China-associated espionage group accused of infiltrating telecommunications and internet providers worldwide. The incident illustrates the severity of the campaign and the need for defenders to act quickly when a sophisticated actor gains a foothold inside critical network environments. T-Mobile’s team had reportedly been hunting the intruders across its environment without a clear breakthrough. T-Mobile Cuts Network Cable to Kick Salt Typhoon Hackers The decisive clue emerged after analysts identified anomalous activity on an internal system that appeared to originate from a router operated by another, unnamed telecommunications provider. The finding pointed to a potential pathway into T-Mobile’s network through interconnected carrier infrastructure. Jeff Simon, T-Mobile’s chief security officer, and three colleagues reportedly traveled to a data center near the company’s Bellevue, Washington headquarters to locate the affected equipment. Rather than relying solely on remote remediation or waiting for a more conventional containment process, the team used scissors to sever the physical cable connecting the suspected compromised hardware to the e