This happened to me in 2021, twice in 1 week, first time it happened I called EE after 30 minutes when my services were dropped, EE managed to block my sim and also remove my phone number from MYEE account, as they said some sort of device managed to obtain eSim via self service which was done on the account!
Finally I thought I was safe, but unfortunately it happened again after a few days, while I was using my phone, luckily had a backup phone near me and managed to block the sim again by calling EE Lost and Stolen department, I was luckily put through to the same person that helped me initially, even they was confused as to how it happened again because apparently it was another self service Esim request! My number had no association with any EE account so we was both confused, I forgot to add at this point when it first happened I did check the MyEE app on my phone and apparently some sort of iPhone 5 which supports Esim was registered (I have never used iphone), they did so much damage, managed to sign to my email accounts and then going on to access many other accounts(MFA FTW), as they had direct access to my number they was able to do anything!
When both these instances happened my sim stopped working and I was told to go to my nearest EE store to get a new sim, upon the second time the manager at the store told me if it happens again we can't give you another sim!!!! Was very rude to me? Did I ask for this?
Now onto EE, my case was sent to the Fraud Department who till this day have not contacted me! I was told they will be contacting me via email, I have never heard back from them, the only thing they did was quite interesting, a few weeks after the incident I recieve a notification about my credit score, that there is an "update" on my credit. It was a CIFAS Marker on my name?!!??! Now those who haven't heard of CIFAS, they essentially blacklist you so you can't even get credit such as a sim only plan!!!!!
Luckily working in Cyber Security, I was aware of my rights so I sent CIFAS a Subject Access Request and a few weeks later they responded with the information they held of me.
EE who without communicating with me had provided my details to CIFAS as "Victim of Impersonation" and the details also included reports of "Internal Fraud at EE"!?!!
I'm now looking into taking legal action against EE, they have a duty to keep our details safe, but unfortunately they allowed their employees to easily take over your sim, as I have understood it!
Very stressful times, still to do this day I am targeted for phishing, it has proved difficult to apply for contracts (Sim Card Plan!), all because EE allowed this to happen, my financial crypto accounts were also compromised during this time!
