T-Mobile US to cough up $31.5M after that long string of security SNAFUs
ID: 5b51747a-dd61-58af-bb9c-0443f9c0ff18
STIX ID: report--5b51747a-dd61-58af-bb9c-0443f9c0ff18
Feed Name: The Register (Security)
Threat Score
T-Mobile US agreed to a $31.5 million settlement with the FCC after a series of network intrusions and data breaches from 2021–2023 that exposed tens of millions of customers' records (notably 76.6M in 2021 and ~37M via an API misconfiguration in 2023); the incidents involved phishing, SIM swap, stolen employee credentials and misconfigured permissions, and the settlement requires fines and substantial security improvements including a CISO, zero-trust, MFA, data minimization and third-party assessments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.