Researchers found that some mobile networks leaked IMEI numbers and phone details during incoming calls. Here’s what happened, what it means for your privacy, and how to protect yourself online.
Table of Contents
What Happened?
BR confirmed the problem through 70 test calls across Telekom, Vodafone, and Telefónica’s O2 network in Germany.
After the findings, GSMA warned more than 1,000 mobile operators to check their systems and remove unnecessary device information.
German operators later made technical changes to stop the leak.
Device details may seem less sensitive than a password, but attackers can still use them to make phishing attempts more specific. They may also search for known security weaknesses tied to a particular phone or software version.
This issue does not mean your email or passwords were leaked. Still, your personal information may have been leaked in other incidents without you knowing.
If you are unsure whether your information was leaked elsewhere, automatic monitoring can help you spot problems earlier. Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Was Affected and What Phone Data Was Leaked?
The investigation tested calls on Germany’s Telekom, Vodafone, and Telefónica O2 networks. It did not say how many customers were affected.
In several Telekom and O2 tests, callers received the phone’s IMEI, a 15-digit number that identifies the device.
Telekom and Vodafone also disclosed the phone model and operating system version in some tests. Vodafone said its tests did not reveal IMEI numbers.
BR did not test networks outside Germany. Therefore, the report does not show whether US carriers have the same problem.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow Mobile Networks Leaked Phone Information During Calls
The leak happened during call setup between customers on different mobile networks.
GSMA said certain VoLTE configurations could accidentally send device identifiers. VoLTE means voice calls carried over a 4G LTE mobile network.
The information could be sent before the recipient answered.
According to Heise, German operators had not correctly implemented industry standards designed to prevent this information from being sent.
That means the problem came from network configuration, not from malware on the phone.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
