Earlier today it was revealed that T-Mobile got a fine of $60 million, the largest penalty for failing to “prevent and report unauthorized access to sensitive data.”
The Committee on Foreign Investment in the US (CFIUS) imposed this fine to T-Mobile after the latter had violated its mitigation agreement terms that were part of its 2020 Sprint acquisition. The alleged vulnerability happened after the acquisition, between 2020 and 2021.
T-Mobile acknowledged the issue and explained that there was no data breach but a technical issue that gave unauthorized access to data. This allowed “information shared from a small number of law enforcement information requests” to be shared within the law enforcement community. The Un-carrier also said that they reported and addressed the technical issue right away.
To date, this is the largest penalty imposed by the CFIUS. Since T-Mobile is primarily owned by a German entity, the CFIUS has jurisdiction over it.
Source: Android Authority
