T-Mobile has confirmed last week’s report that it actually stopped a cyberattack in progress before sensitive customer data was exposed — something the company doesn’t have the best track record for.

T-Mobile didn’t identify the attackers, but the breach resembles the recent Salt Typhoon attacks — which sounds increasingly nefarious as more details arrive.