The main vulnerability to these attacks is beyond Public Mobile's control. It's people sharing too much of their "personal" and "private" information where anyone else can easily obtain it. It's people using lazy password habits which make their accounts easy to hijack. It's people letting untrustworthy folks access their devices and their data.
Public Mobile really can't do much to "secure" or "protect" customers who have bad habits which attract the attackers.
I'm not saying all the victims are sloppy, lazy, stupid, or naive. Many aren't. Some are exceptionally informed and careful. But those who set themselves up as victims will usually end up becoming victims.
