KrebsOnSecurity has learned a Connecticut man operated a service that leveraged these same flaws to sell their customers personal data. The man earned bug bounty rewards and public recognition from top telecom companies for finding and reporting security holes in their Web sites. As late as June 2018 Ryan was offering a service he claimed was capable of doxing any usa carrier, including Verizon, AT&T-Mobile, MetroPCS and T-PCS. He said he sold the number of his customer data for $25, which he sold per record.”]
Source: https://krebsonsecurity.com/2018/11/bug-bounty-hunter-ran-isp-doxing-service/