T-Mobile Settles $31.5 Million FCC Probe Over Data Breaches

T-Mobile has settled with the FCC for $31.5 million over data breaches affecting millions of U.S. consumers from 2021 to 2023. As part of the settlement, T-Mobile will pay a civil penalty and enhance its cybersecurity. The breaches exposed security flaws in the network architecture and cyber hygiene practices.

T-Mobile has reached a significant $31.5 million settlement to resolve an FCC investigation into multiple data breaches over three years that affected tens of millions of U.S. consumers, the agency announced on Monday. T-Mobile will pay a $15.75 million civil penalty and invest an additional $15.75 million over two years to bolster its cybersecurity program.

The FCC detailed that T-Mobile experienced data breaches in 2021, 2022, and 2023, compromising the information of millions of current, former, or prospective customers. Particularly, the 2021 breach alone impacted 76.6 million U.S. consumers, while the 2023 incident affected 37 million.

FCC Chairwoman Jessica Rosenworcel emphasized that today's mobile networks are prime targets for cybercriminals and warned that providers must enhance their systems to avoid severe repercussions. In contrast, T-Mobile affirmed its significant investments in cybersecurity and commitment to protecting customer information.

Earlier in the month, the FCC also disclosed similar settlements with AT&T and Verizon's TracFone Wireless over data breaches, highlighting ongoing regulatory efforts to secure consumer data.

(With inputs from agencies.)