T-Mobile USA, Inc., $31,500,000
T-Mobile settled with the FCC over multiple data breaches that collectively exposed information of 76 million customers between 2021 and 2023.
Case identifiers
- Respondent
- T-Mobile USA, Inc.
- Agency
- Federal Communications Commission
- Announced
- 2024-09-30
- Monetary relief
- $31,500,000
- Case number
- FCC EB-TCD-22-00033568
- Statutes cited
- Communications Act § 201 · FCC Privacy Rules
Key facts
- 1
Multiple breaches from 2021 to 2023 exposed personal information of 76 million customers.
- 2
Exposed data included SSNs, driver’s license numbers, and IMSI identifiers.
- 3
$15.75 million civil penalty plus $15.75 million in required cybersecurity investments.
- 4
Required binding Corporate Information Security Officer and board-level security oversight.
What the order requires
Injunctive terms imposed by the Federal Communications Commission. These bind T-Mobile USA, Inc.'s data practices going forward.
- Required implementation of zero-trust architecture and multi-factor authentication.
- Required separation of customer data from operational systems.
- Obligation to report breaches to the FCC within defined timelines.
- Board-level cybersecurity oversight committee.
Primary sources
Read the original government documents. These are the authoritative records, everything on this page is derived from them.
- Federal Communications Commission press releasehttps://www.fcc.gov/document/fcc-t-mobile-reach-315-million-data-breach-settlement
Exercise your rights now
Generate a deletion request for $5
The FCC order binds T-Mobile USA, Inc.'s future practices, but doesn't automatically delete your existing data. State privacy law (CCPA, CPA, TDPSA, VCDPA) gives you that right. OfflistMe generates a compliant deletion email pre-addressed to T-Mobile USA, Inc.'s registered privacy contact.
Start for $5 →FAQ
What did the FCC charge T-Mobile USA, Inc. with?+
T-Mobile settled with the FCC over multiple data breaches that collectively exposed information of 76 million customers between 2021 and 2023. The Federal Communications Commission cited Communications Act § 201, FCC Privacy Rules.
How much did T-Mobile USA, Inc. pay?+
T-Mobile USA, Inc. paid $31,500,000 in monetary relief, announced on 2024-09-30. The settlement also imposed injunctive terms (see below).
Does the T-Mobile USA, Inc. settlement mean my data has been deleted?+
No, the order does not automatically delete your data. You retain full rights under state privacy law (CCPA, CPA, TDPSA, VCDPA, and others) to submit your own deletion request. OfflistMe can generate a compliant deletion email pre-addressed to the respondent’s privacy contact.
How can I read the original FCC order?+
The Federal Communications Commission press release is available at https://www.fcc.gov/document/fcc-t-mobile-reach-315-million-data-breach-settlement. The case / matter number is FCC EB-TCD-22-00033568.