Security News > 2022 > January > FCC wants new data breach reporting rules for telecom carriers
The Federal Communications Commission has proposed more rigorous data breach reporting requirements for telecom carriers in response to breaches that recently hit the telecommunications industry.
"I look forward to having my colleagues join me in taking a fresh look at our data breach reporting rules to better protect consumers, increase security, and reduce the impact of future breaches."
The FCC also wants feedback regarding the inclusion of specific categories of information in breach alerts carriers sent to customers, which would help ensure the breach notifications come with actionable info for consumers.
As part of this same effort, the FCC proposed new rules to fend off SIM-swapping attacks and port-out fraud in September to further reduce the risk of telecom customers' information being improperly exposed.
In February, T-Mobile learned of a data breach following reports from multiple customers who became victims of SIM-swapping attacks.
In August, the same carrier disclosed a massive data breach after attackers brute-forced their way through its network and gained access to testing environments, allowing them to steal records belonging to 54.6 million current, former, or prospective customers.
News URL
Related news
- Data breach at Japanese telecom giant NTT hits 18,000 companies (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)
- Background check, drug testing provider DISA suffers data breach (source)
- PowerSchool previously hacked in August, months before data breach (source)
- Western Alliance Bank notifies 21,899 customers of data breach (source)
- Sperm donation giant California Cryobank warns of a data breach (source)
- Pennsylvania education union data breach hit 500,000 people (source)
- Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years (source)
- StreamElements discloses third-party data breach after hacker leaks data (source)