T-Mobile bug left 74 million user accounts exposed The exposed lookup tool let anyone run a customer's phone number -- and obtain their home address and account PIN, used to contact phone support.