Security News > 2022 > July > T-Mobile US to cough up $550m after info stolen on 77m customers

T-Mobile US has agreed to pay about $550 million to end legal action against it and improve its security after crooks infiltrated the self-described Un-carrier last summer and harvested personal data belonging to almost 77 million customers.

The cellular network operator agreed to pay $350 million plus legal fees to settle a class-action lawsuit brought by customers whose data was compromised in an August 2021 privacy breach, according to documents filed with the US Securities and Exchange Commission on Friday.

This payout will be divided up among 76.6 million US residents, according to the proposed settlement agreement [PDF], which is subject to approval by a district court judge.

While crooks claimed to have stolen data belonging to 100 million - including their names, addresses, social security numbers and drivers license info - T-Mo execs at the time copped to a mere 48 million compromised customers.

In addition to writing checks to millions of customers to settle the class-action lawsuit, as well as settling other separate claims, the mobile carrier will also spend $150 million on data security "Related technology" this year and next.

"In connection with the proposed class-action settlement and the separate settlements, the company expects to record a total pre-tax charge of approximately $400 million in the second quarter of 2022," plus "The $150 million incremental spend," the SEC filing noted.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/07/25/tmobile_to_pay_550m_data_breach/