T-Mobile reaches $31.5 million settlement with FCC over past data breaches 

T-Mobile agreed to a $31.5 million FCC settlement resolving multiple data breaches from 2021–2023 that exposed tens of millions of customers' personal data, including names, addresses, Social Security numbers and driver’s license IDs. The consent decree mandates $15.75M in required security improvements and comprehensive program changes—phishing-resistant MFA, network segmentation, data minimization/deletion, third-party audits, and an empowered CISO—after incidents involving credential guessing and lateral movement, SIM‑swapping, phishing of employees, and a misconfigured API that impacted 37 million customers.