In December 2025, Total Wireless learned of a security incident involving consumer information after its identity verification service provider, Veriff, notified the company that an unauthorized party had accessed certain customer data. Veriff informed Total Wireless on December 10, 2025, that an unauthorized party obtained personal information belonging to some Total Wireless customers.
Total Wireless, a wireless service provider offering prepaid mobile services nationwide, relies on Veriff to perform identity verification for promotions and account security.
The affected information originated entirely from Veriff’s systems; Total Wireless confirms that its own systems were not impacted.
Following the breach, Veriff secured its systems and engaged a cybersecurity firm to investigate the incident. Total Wireless notified law enforcement and began issuing breach notifications to affected individuals. Impacted customers are being offered 12 months of complimentary identity protection and credit monitoring services through Experian IdentityWorks. Individuals also received instructions on how to enroll.
The company advises affected customers to remain vigilant, carefully review account and financial statements, and monitor their credit reports for any unauthorized activity.
What information is involved in the Total Wireless Data Breach?
Compromised information may include:
Image of the government-issued ID submitted to Veriff
Postal Address
Date of Birth
Total Wireless emphasizes the importance of protecting personal information and directs individuals to take precautionary measures such as reviewing credit reports, monitoring financial activity, and being cautious of phishing attempts or unsolicited communications requesting personal information.
Your Personally Identifiable Information (PII) includes sensitive data that can be used to identify you. Organizations are legally required to safeguard this information, and exposure of PII increases the risk of identity theft or fraud.
A subset of PII — Protected Health Information (PHI) — includes medical or health‑related data. While the Total Wireless incident did not indicate PHI involvement, PHI combined with PII can heighten identity theft risks.
Total Wireless encourages consumers to request their free annual credit reports and consider placing fraud alerts or security freezes with major credit bureaus. The notice also includes detailed contact information for Equifax, Experian, TransUnion, and the Federal Trade Commission, as well as state‑specific identity theft resources.
Consumers should remain alert for unusual account activity and utilize the complimentary identity protection services provided by Total Wireless to help mitigate risks.
California residents benefit from additional privacy protections under the California Consumer Privacy Act (CCPA) and the Confidentiality of Medical Information Act (CMIA), which impose strict data‑security and notification requirements.
If you received a NOTICE OF DATA BREACH letter from Total Wireless, your personal information may be at risk. This type of sensitive data can be misused by identity thieves to commit fraud and other crimes.
Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.