“On or about August 15, 2021,” the complaint for this class action alleges, “T-Mobile’s data, which purports to including the PII or over 100 million T-Mobile users, was put on a forum for sale for 6 bitcoin, or approximately $270,000.” The complaint alleges that T-Mobile failed to implement necessary security practices, and that this has put the PII, or personally identifiable information, into the hands of cybercriminals.
The class for this action is all individual in the US whose PII was compromised in the T-Mobile data breach that took place in or around August 2021.
T-Mobile’s 2020 Annual Report claims that the company provides services to more than 102 million mobile customers. The complaint alleges, “it claims to have broader coverage, faster speeds, and greater signal strength.” It offers wireless and prepaid plans, phones, Internet services, television (through YouTube TV), and banking services (through T-Mobile Money).
T-Mobile purports to understand the need for security. The complaint quotes its website as offering the “privacy you deserve” and saying that its “privacy principles mean you can trust us to do the right thing with your data” and that it will “provide tools to help keep you protected.”
Nevertheless, on August 15, 2021, the company announced that it was investigating an online offer to sell T-Mobile data, including customers’ PII. The PII for sale purportedly included a portion of the stolen data with 30 million Social Security numbers and driver’s licenses[,]” the complaint alleges, adding, “The bad actor indicated that the rest of the data was being sold privately.”
The next day, it issued an update, saying, “We are confident that the entry point used to gain access has been closed, and we are continuing our deep technical review of the situation across our systems to identify the nature of any data that was illegally accessed.”
Over the following days, T-Mobile confirmed that customer PII had been stolen and counted up numbers of people who had been affected.
T-Mobile collects personal information when consumers sign up for accounts. With this collection of information, the complaint alleges, “T-Mobile assumed legal and equitable duties and knew or should have known that it was responsible for protecting [the] PII from disclosure.”
The complaint alleges that the company was remiss in not adequately protecting the information it collected: “Had T-Mobile remedied the deficiencies in its information storage and security systems, followed industry guidelines, and adopted security measures recommended by experts in the field, T-Mobile could have prevented intrusion into its information storage and security systems and, ultimately, the theft of Plaintiff’s and Class Members’ confidential PII.”
Article Type: LawsuitTopic: Privacy
Most Recent Case Event
T-Mobile Exposure of PII of One Hundred Million People Complaint
January 28, 2022
“On or about August 15, 2021,” the complaint for this class action alleges, “T-Mobile’s data, which purports to including the PII or over 100 million T-Mobile users, was put on a forum for sale for 6 bitcoin, or approximately $270,000.” The complaint alleges that T-Mobile failed to implement necessary security practices, and that this has put the PII, or personally identifiable information, into the hands of cybercriminals.
T-Mobile Exposure of PII of One Hundred Million People ComplaintCase Event History
T-Mobile Exposure of PII of One Hundred Million People Complaint
January 28, 2022
“On or about August 15, 2021,” the complaint for this class action alleges, “T-Mobile’s data, which purports to including the PII or over 100 million T-Mobile users, was put on a forum for sale for 6 bitcoin, or approximately $270,000.” The complaint alleges that T-Mobile failed to implement necessary security practices, and that this has put the PII, or personally identifiable information, into the hands of cybercriminals.
T-Mobile Exposure of PII of One Hundred Million People Complaint