20-Year-Old Hacker Noah Urban Tricks AT&T and T-Mobile Employees, Exposing Customer Data Without Coding Skills

In a significant cybersecurity case, 20-year-old Noah Michael Urban received a 10-year prison term for orchestrating a series of high-profile SIM-swapping attacks targeting major U. S.telecommunications companies, including T-Mobile and AT&T, in August 2025. What makes this case particularly noteworthy is Urban’s reliance on social engineering tactics, rather than exceptional programming skills, to manipulate these carriers into revealing sensitive customer information.

Noah Urban: Outsmarting Industry Giants Without Coding Skills

A Bloomberg report outlines Urban’s foray into cybercrime, beginning at just 15 years old. His initial exposure came from participating in online discussions where SIM swapping was a common topic. Urban quickly honed his craft, mastering the art of exploiting human vulnerabilities and persuading people to bypass crucial security measures.

Utilizing these tactics, he manipulated carrier employees to gain unauthorized access to customer data, highlighting a critical issue: technical know-how is no longer a requisite for compromising corporate security systems. Rather, it is often the unguarded human element that presents the most significant risk, as Urban’s case exemplifies.

Ultimately, Urban faced charges for targeting 13 different telecommunications companies, including AT&T and T-Mobile, among others. Although he confessed to his actions, his defense lawyer argued that Urban lacked a full understanding of the severity of his offenses, claiming he was influenced by more experienced co-conspirators. This defense stressed that even major corporations can fall victim to such methods, underscoring the vulnerabilities that exist within large organizations.

The report notes a troubling trend: social engineering is increasingly used as a primary method to unlawfully access confidential information. As technical skills become less integral to cybercrime, companies must re-evaluate their security strategies and enhance awareness around digital safety to prevent vulnerabilities that can lead to such breaches.

Despite ongoing advancements in technology and security measures, human vulnerabilities remain a critical area requiring attention. Companies, particularly in the telecommunications sector, must prioritize training and awareness programs to defend against the rising tide of cybercrime, especially as data breaches become more frequent.

Source & Images