It seems like we heard about this perhaps a week ago from the blogosphere and even some mass-media types. I dunno. But, this came in this evening from T-mobile:

Uh-huh… and you’re just now getting round to letting customers know?

T-mobile takes the protection of their customers seriously… but not seriously enough to let those customers know promptly and certainly not seriously enough to prevent it happening to begin with.