T-Mobile Fined $60M Due to Unauthorized Data Access Breaching National Security Agreement 

• Committee on Foreign Investment in the United States accused T-Mobile of failing to implement adequate security measures.
• Failing to report security breaches in due time was also a reason for the $60 million fine.
• The company was subject to a string of security breaches in the past six years, which led to millions of customers’ sensitive information being exposed.

A $60 million fine was issued for communications giant T-Mobile US, Inc., for allegedly suffering security incidents between August 2020 and June 2021 that resulted in unauthorized data access, which violated a key provision of a National Security Agreement (NSA), said the Committee on Foreign Investment in the United States (CFIUS) in a recent report. 

The company, owned by German company Deutsche Telekom, joined the NSA as part of its 2020 merger with Sprint Corporation, which the CFIUS government agency, which is responsible for reviewing foreign investments in the country, approved to mitigate potential national security risks.

The report alleges that T-Mobile did not implement adequate measures to prevent unauthorized access to sensitive data or report such security incidents in a timely manner, which led CFIUS to conclude the company’s data breaches harmed the U.S. national security interests and levy an unprecedented $60 million fine, the largest penalty imposed by CFIUS to date.

T-Mobile enhanced its compliance posture and obligations and committed to cooperating with the U.S. government to ensure compliance in the future.

In November 2021, just a year after it acquired Sprint, T-Mobile suffered a major breach, with hackers selling 100 million records corresponding to 30 million American subscribers, exposing social security numbers, phone numbers, full names, physical addresses, driver's license scans, and unique IMEI numbers in the pack.

The company’s past data breach incidents include one in February 2021, one in December 2020, another in November 2019, and one in August 2018. 

Related

Facebook's Parent Company Faces Record Fines in EU Over Massive 2018 Data Breach

Serbian Police Unlock and Plant 'NoviSpy' Spyware on Journalist’s Phone via Cellebrite

Australia Makes Ransom Payment Reporting Mandatory via New Cyber Security Act

Minnesota Man Convicted for Advertising and Distributing CSAM on the Dark Web

Facial Recognition Breach Ruling Amplifies Privacy Debates in Australia

German Court Rules on Facebook Data Breach Compensation of Approximately €100

Most Popular

Attack on Titan: The Last Attack- all the Confirmed International Theatrical Release Dates

Den of Thieves 2: Pantera- All we know About the sequel to the Surprise hit Heist film

Does Sonic 3 have a Post-Credits Scene?

What we know so far About Virgin River Season 7

Colleen Hoover’s Verity Movie Adaptation adds two more Hollywood Stars to its cast

Stranger Things Season 5 Release date: One good news and one bad news for fans