Security News > 2022 > November > Experian, T-Mobile US settle data spills for mere $16m

Experian and T-Mobile have reached separate settlements with 40 US states following a pair of data breaches in 2012 and 2015.

Experian will be bearing the largest brunt of the fine, with $14 million coming from the credit reporting company.

Led by attorneys general from Massachusetts and Illinois, the settlements stem from a pair of data breaches at Experian in 2012 and 2015, the latter of which T-Mobile was caught up in.

All the data collected by that single intruder was handed to other nefarious parties, who made over 3 million queries for personal information against data owned by CVI and Experian.

T-Mobile and Experian notified customers of that attack, and Experian offered free credit reporting services, as is usually the case when a large company has that volume of personally identifiable information stolen.

In 2020, Experian reported it had handed data including PII for 24 million South Africans to another individual who falsely representing themselves in order to gain access.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/11/08/experian_tmobile_fined_over_2012/