T-Mobile pays $16 million fine for three years’ worth of data breaches

T-Mobile has agreed to pay a $15.75 million fine and improve its security in a settlement over a series of data breaches over three years that affected tens of millions of customers.

"T-Mobile suffered data breaches in 2021, 2022, and 2023," the Federal Communications Commission Enforcement Bureau said in an order approving a consent decree yesterday. "Combined, these breaches affected millions of current, former, or prospective T-Mobile customers and millions of end-user customers of T-Mobile wireless service resellers, which operate on T-Mobile's network infrastructure and are known as mobile virtual network operators (MVNOs)."

Four breaches occurring over three years exposed personal information, including customer names, addresses, dates of birth, Social Security numbers, driver's license numbers, the features customers subscribed to, and the number of lines on their accounts.