The same data for about 7.8 million current T-Mobile postpaid customers appears to be compromised. No phone numbers, account numbers, PINs, passwords, or financial information from the nearly 50 million records and accounts were compromised, it said.

T-Mobile also confirmed that approximately 850,000 active T-Mobile prepaid customer names, phone numbers and account PINs were exposed. The company said that it proactively reset all of the PINs on those accounts. No Metro by T-Mobile, former Sprint prepaid, or Boost customers had their names or PINs exposed.

There was also some additional information from inactive prepaid accounts accessed through prepaid billing files. T-Mobile said that no customer financial information, credit card information, debit or other payment information or Social Security numbers were in the inactive file.

The announcement comes two days after T-Mobile said that it was investigating a leak of its data after someone took to an online forum offering to sell the personal information of cellphone users.

The company said Monday that it had confirmed there was unauthorized access to “some T-Mobile data” and that it had closed the entry point used to gain access.

The company said that it will immediately offer two years of free identity protection services and is recommending that all of its postpaid customers change their PIN. Its investigation is ongoing.

T-Mobile, which is based in Bellevue, Washington, became one of the country’s largest cellphone service carriers, along with AT&T and Verizon, after buying rival Sprint.

More tech coverage from Fortune:

• Apple accepts 15 Black and brown-led businesses for impact accelerator
• What are stablecoins? Your guide to the fast-rising alternative to Bitcoin and Ethereum
• Employees may need to keep up “the pretense of working” as automation spreads, says A.I. expert Kai-Fu Lee
• What will the future of Big Tech regulation look like? Europe offers some clues
• A road trip on a single charge? Why the long-distance EV remains a pipe dream