T-Mobile Details

    Organization Logo

    T-Mobile

    Bellevue, WA • 71000 employees • Utilities

    Industry

    Utilities

    Security Incidents

    1

    Security Incidents

    T-Mobile Breach of Jan 2023
    Severity Score
    Significant to High

    Type

    Data Breach

    Summary

    Between August 2020 and June 2021, T-Mobile experienced several unauthorized data access incidents, violating a national security agreement it had entered into with the Committee on Foreign Investment in the United States (CFIUS) as part of its 2020 merger with Sprint. These breaches, which compromised sensitive data, led to a $60 million fine imposed by CFIUS, the largest penalty in its history.

    Additionally, T-Mobile agreed to a $31.5 million settlement with the Federal Communications Commission (FCC) in September 2024, addressing multiple data breaches between 2021 and 2023. This settlemen...
    Show more

    Severity

    T-Mobile US faced significant cybersecurity challenges between 2020 and 2023, involving multiple data breaches that exposed sensitive information of tens of millions of customers. The breaches resulted from various attack vectors, including unauthorized network access, phishing, and API misconfigurations. Among the most notable incidents was the theft of data relating to 76.6 million customers in 2021.

    The U.S. government agencies, including CFIUS and the FCC, have imposed substantial penalties on T-Mobile, totaling over $91.5 million. Additionally, T-Mobile is required to invest heavily in ...
    Show more

    Impact

    The cyber incidents involving T-Mobile US have had a considerable impact, both financially and operationally. Between August 2020 and June 2021, unauthorized data access incidents led to a violation of a national security agreement related to T-Mobile's merger with Sprint, prompting the Committee on Foreign Investment in the United States (CFIUS) to impose a substantial $60 million fine for compromising national security interests.

    Further exacerbating the situation, T-Mobile experienced multiple data breaches between 2021 and 2023, affecting millions of customers. Critical personal and devic...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos