Washington State Attorney General Bob Ferguson has filed a consumer protection lawsuit against T-Mobile, alleging the company’s cybersecurity negligence led to the 2021 breach of sensitive personal data for more than 2 million state residents. The lawsuit accuses T-Mobile of knowing about its vulnerabilities for years, failing to address them, and misleading customers about its data security practices.
Details of the Breach and Allegations
The 2021 breach compromised personal information for 79 million T-Mobile customers nationwide, including Social Security numbers (SSNs) for 183,000 Washington state residents. Other data exposed included phone numbers, names, physical addresses, and driver’s license information.
Key accusations in the lawsuit include:
- Negligence in Cybersecurity Practices: T-Mobile allegedly ignored known weaknesses in its cybersecurity systems, creating vulnerabilities that hackers exploited.
- Failure to Notify Customers Properly: Customers were informed of the breach via text messages that omitted critical information about the scope and severity of the hack.
- Misleading Communication: Customers whose SSNs were exposed were not informed, while others whose SSNs were safe were reassured unnecessarily.
- Poor Security Measures: The company reportedly used weak passwords and demonstrated a lack of oversight in monitoring and addressing security threats.
“This significant data breach was entirely avoidable,” said Attorney General Ferguson. “T-Mobile had years to fix key vulnerabilities in its cybersecurity systems—and it failed.”
Regulatory Action and Previous Settlements
In September, T-Mobile agreed to a $31.5 million settlement with the Federal Communications Commission (FCC) over its cybersecurity failings. The settlement required the company to adopt zero-trust network security and multi-factor authentication measures—basic protections that were missing during the breach.
Despite these actions, the lawsuit claims the company’s negligence extended beyond the 2021 hack, contributing to additional breaches in 2022 and 2023.
A Pattern of Neglect
The breach began in March 2021 and went undetected until August, when an outsider informed T-Mobile that customer data was for sale on the dark web. The lawsuit points out that T-Mobile’s SEC filings in 2020 acknowledged its status as a high-value target for hackers, yet the company failed to act decisively.
T-Mobile’s public assurances to customers, such as the statement, “We’ve got your back,” on its website, are cited as misleading in the lawsuit. The AG’s office alleges that such claims were at odds with the company’s lackluster security practices.
T-Mobile’s Response
T-Mobile issued a statement expressing surprise at the lawsuit, emphasizing its past conversations with the AG’s office and its willingness to continue discussions. The company pointed to recent improvements in its cybersecurity measures, stating, “We look forward to sharing how T-Mobile has fundamentally transformed our approach to cybersecurity over the past four years to further protect our customers.”
What the Lawsuit Seeks
The lawsuit demands:
Civil Penalties: Monetary fines for consumer protection violations.
Improved Cybersecurity Measures: Mandating T-Mobile to strengthen its cybersecurity program and adopt rigorous oversight mechanisms.
The Bigger Picture
This case underscores the growing scrutiny of companies’ data protection practices amid an escalating wave of cyberattacks. Businesses are increasingly being held accountable for breaches that expose consumers to identity theft and fraud. For T-Mobile, the lawsuit serves as a stark reminder that ignoring cybersecurity risks can result in costly legal and reputational consequences.
As the legal process unfolds, the spotlight remains on whether T-Mobile’s promised improvements can rebuild trust with its customers and regulators alike.
Support truth, health, and preparedness by shopping the Alex Jones Store through our link. Every purchase helps sustain independent voices and earns us a 10% share to fuel our mission. Shop now and make a difference!
https://thealexjonesstore.com?sca_ref=7730615.EU54Mw6oyLATer7a
Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com
