A former AT&T store employee has been sentenced for acting as an inside man for a SIM-swap gang. Kenneth Carter, aged 44 and from Portland, Oregon, was handed a 16-month federal prison term, according to a report from Bitdefender's Graham Cluley. Carter previously worked at an AT&T retail store, where he appears to have helped the gang in exchange for extra monthly income.

SIM swapping relies on tricking or bribing people with access to mobile carrier systems to transfer a victim's phone number to a SIM card controlled by an attacker. Once the number is under the criminal's control, they can intercept one-time passcodes and take over the victim's online accounts. The exact details of how Carter assisted the gang are not fully spelled out in the available report, but the sentencing shows that carriers and law enforcement are treating insider involvement seriously.

The case is a reminder that SIM-swap attacks are not always purely social engineering against customer service lines. Insiders at retail stores with access to customer accounts can be just as dangerous. There is only this single source available, so no contrasting reporting exists, but the account is clear on the essential fact: Carter went from an AT&T store employee to a federal inmate because of his side gig. For anyone worried about account security, the incident reinforces the value of using authenticator apps or hardware keys rather than SMS-based two-factor authentication.We need to produce strict JSON with exactly those keys. Ensure body has 2-4 short paragraphs of markdown. Headline under 80 chars. Let's craft carefully. We must not exceed. Count chars: