MacRumors on Nostr: United States Fines T-Mobile $60 Million for Failing to Prevent Unauthorized Access ...
United States Fines T-Mobile $60 Million for Failing to Prevent Unauthorized Access to Sensitive Customer Data
T-Mobile was fined $60 million by the Committee on Foreign Investment in the US (CFIUS) for negligence surrounding data breaches, reports Reuters. CFIUS penalized T-Mobile for failing to prevent or disclose unauthorized access to sensitive customer data.
When T-Mobile merged with Sprint, it signed a national security agreement with CFIUS, which is what led to the fine earlier this year. T-Mobile is owned by German company Deutsche Telekom, and T-Mobile agreed to protect consumer data as part of the Sprint acquisition. Back in 2021, T-Mobile suffered a major breach that impacted over 100 million of its users, just a year after it acquired Sprint.
In 2024, following an initial Notice of Penalty issued in 2023, CFIUS resolved an enforcement action against T-Mobile US, Inc. ("T-Mobile"), a telecommunications company, resulting in a $60 million penalty. As publicly disclosed by T-Mobile, the company entered into a National Security Agreement ("NSA") with CFIUS in 2018 in connection with T-Mobile's merger with Sprint and the foreign ownership of the resulting entity. CFIUS determined that between August 2020 and June 2021, in violation of a material provision of the NSA, T-Mobile failed to take appropriate measures to prevent unauthorized access to certain sensitive data and failed to report some incidents of unauthorized access promptly to CFIUS, delaying the Committee's efforts to investigate and mitigate any potential harm. CFIUS concluded that these violations resulted in harm to the national security equities of the United States. T-Mobile has worked with CFIUS to enhance its compliance posture and obligations and has committed to working cooperatively with the U.S. Government to ensure compliance with its obligations going forward.
T-Mobile told Reuters that it experienced technical issues when integrating with Sprint, which affected information from "a small number of law enforcement information requests." T-Mobile claims to have swiftly dealt with the issue and reported it "in a timely manner."
Tag: T-Mobile
This article, "United States Fines T-Mobile $60 Million for Failing to Prevent Unauthorized Access to Sensitive Customer Data" first appeared on MacRumors.com
Discuss this article in our forums
https://www.macrumors.com/2024/08/15/t-mobile-60-million-data-breach-fine/Published at
2024-08-15 22:45:12Event JSON
{
"id": "d79bcd77f8ed21c1f5f2859e17b51776331de947a72e4d9b53043c910f1e1596",
"pubkey": "111d981b006ddd9ef06972261a4de0b03a5e6481657155d8186083e9b248ba17",
"created_at": 1723754712,
"kind": 1,
"tags": [
[
"guid",
"https://www.macrumors.com/2024/08/15/t-mobile-60-million-data-breach-fine/"
]
],
"content": "United States Fines T-Mobile $60 Million for Failing to Prevent Unauthorized Access to Sensitive Customer Data\n\nhttps://images.macrumors.com/article-new/2024/05/T-Mobile-Generic-Feature-Pink-1.jpg\n\nT-Mobile was fined $60 million by the Committee on Foreign Investment in the US (CFIUS) for negligence surrounding data breaches, reports Reuters. CFIUS penalized T-Mobile for failing to prevent or disclose unauthorized access to sensitive customer data.\r\n\r\n\r\nWhen T-Mobile merged with Sprint, it signed a national security agreement with CFIUS, which is what led to the fine earlier this year. T-Mobile is owned by German company Deutsche Telekom, and T-Mobile agreed to protect consumer data as part of the Sprint acquisition. Back in 2021, T-Mobile suffered a major breach that impacted over 100 million of its users, just a year after it acquired Sprint.\r\n\r\nIn 2024, following an initial Notice of Penalty issued in 2023, CFIUS resolved an enforcement action against T-Mobile US, Inc. (\"T-Mobile\"), a telecommunications company, resulting in a $60 million penalty. As publicly disclosed by T-Mobile, the company entered into a National Security Agreement (\"NSA\") with CFIUS in 2018 in connection with T-Mobile's merger with Sprint and the foreign ownership of the resulting entity. CFIUS determined that between August 2020 and June 2021, in violation of a material provision of the NSA, T-Mobile failed to take appropriate measures to prevent unauthorized access to certain sensitive data and failed to report some incidents of unauthorized access promptly to CFIUS, delaying the Committee's efforts to investigate and mitigate any potential harm. CFIUS concluded that these violations resulted in harm to the national security equities of the United States. T-Mobile has worked with CFIUS to enhance its compliance posture and obligations and has committed to working cooperatively with the U.S. Government to ensure compliance with its obligations going forward.\nT-Mobile told Reuters that it experienced technical issues when integrating with Sprint, which affected information from \"a small number of law enforcement information requests.\" T-Mobile claims to have swiftly dealt with the issue and reported it \"in a timely manner.\"\r\n\r\nTag: T-Mobile\nThis article, \"United States Fines T-Mobile $60 Million for Failing to Prevent Unauthorized Access to Sensitive Customer Data\" first appeared on MacRumors.com\nDiscuss this article in our forums\n\nhttps://www.macrumors.com/2024/08/15/t-mobile-60-million-data-breach-fine/",
"sig": "b28f084d4a46161742275b6cff231f9a0a30a8da5d47c6d32e5151583ce7136320e46f0e510bf76bad95be31bd9cf4e4a039d810be9100fd15fc33c9f5515640"
}
