FCC Orders T-Mobile to Boost Cybersecurity After Data Breaches! 🔒

News & Articles
, ,
1

Summary:

  1. Data Breach History
    T-Mobile faced three significant data breaches in 2021, 2022, and 2023, compromising millions of customer accounts, prompting the Federal Communications Commission (FCC) to investigate.

  2. Settlement Conditions
    As part of a court settlement, T-Mobile has agreed to enhance its cybersecurity measures, which includes implementing a “modern zero-trust architecture” and appointing a Chief Information Security Officer.

  3. Security Enhancements
    The telecom giant will also implement phishing-resistant multifactor authentication, alongside processes for data minimization, inventory, and disposal to limit customer data collection and retention.

  4. Financial Penalty
    T-Mobile is required to pay a $15.75 million penalty and match that amount in investments to fortify its cybersecurity framework and develop a compliance plan to safeguard against future breaches.

  5. Future Investments Required
    The FCC’s consent decree noted that achieving these improvements will necessitate significant investments, potentially exceeding $157.5 million at T-Mobile’s operational scale.

Read more at: CSO Online | CSO Online | CSO Online | FCC Document

1 Like