"The Community" Indictment Exposes Bribed Carrier Insiders Behind SIM-Swap Crypto Thefts
In May 2019 U.S. prosecutors in Michigan charged six members of the hacking group "The Community" and three former mobile-carrier employees (two at AT&T stores, one at Verizon) over SIM swaps used to steal more than $2.4 million in cryptocurrency, documenting insider bribery as a SIM-swap channel. The pattern persisted: the FCC adopted SIM-swap and port-out rules in November 2023, and in November 2025 the Manhattan DA indicted a ring that included four AT&T and T-Mobile store employees.
02Deep-Dive Technical Analysis
According to the DOJ, SIM hijacking by "The Community" was often facilitated by bribing a mobile-carrier employee, and otherwise by social-engineering customer service while posing as the victim. Insiders used their legitimate retail access to carrier BSS/OSS provisioning systems to re-associate the victim's MSISDN with a SIM controlled by the attackers. Incoming SMS one-time passcodes and voice-based account recovery then flowed to the attacker, enabling rapid takeovers of cryptocurrency exchange, email and social-media accounts.
03Vulnerability & Exploit Flow
Insider bribery and unauthorized credential sharing in carrier retail store management software.
04Recommended Defense & Mitigation Protocol
Mandate hardware security keys for retail staff, enforce carrier-side SIM swap port-out locks, and phase out SMS OTP authentication.
05Security Impact & Geopolitical Consequence
Exposed the profound vulnerability of telecom retail store human factors as the single point of failure in global SMS-based multi-factor authentication, accelerating the transition to FIDO2 WebAuthn passkeys.
06Authoritative Standards & External References
- 01US Attorney's Office E.D. Michigan — Nine Individuals Connected to a Hacking Group ('The Community') Charged With Online Identity Theft
- 02KrebsOnSecurity — Nine Charged in Alleged SIM Swapping Ring (May 2019)
- 03FCC — FCC 23-95 Report and Order: Protecting Consumers from SIM Swap and Port-Out Fraud
- 04Manhattan District Attorney — D.A. Bragg Announces Indictment of SIM-Swapping ID Theft Ring, Including AT&T and T-Mobile Employees (Nov 2025)
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.