Sunday, October 18, 2026

T-Mobile Decides To Settle $350 Million For Massive 2021 Data Breach

A class-action lawsuit brought by a group of customers against T-Mobile relating to the 2021 hack has been settled for $500 million. Approximately 76.6 million US residents’ personal information has been exposed due to this data breach.

T-Mobile is claiming that as part of the proposed agreement, it will contribute $350 million to a settlement fund that will be used for:-

  • Lawyers
  • Fees
  • People who file claims

Moreover, the company will have to spend $150 million over the next two years (2022 and 2023) to deal with data security and related technologies.

Data Breach

Over 100 million records of the company’s customers were being sold on the black market after their systems were breached. The types of data that were compromised are listed below:-

  • Social Security numbers
  • Names
  • Addresses
  • Driver’s license information

There is still a need for a judge to approve the proposed settlement agreement before it becomes effective. 

T-Mobile, however, will have 10 days to put money into the fund if it is approved, so that it can notify the people who are eligible for the fund to pay for the costs.

There are no estimates contained in the settlement agreement as to how much each claimant will likely receive based on the settlement agreement. 

The problem is that it is incomprehensible to estimate such a thing until an exact number of people is known who will file claims for compensation.

Lawsuit

It is alleged that T-Mobile will be forced to settle a class-action lawsuit that accuses it of:-

  • Failing to protect customers’ data
  • Not properly notifying people impacted
  • Inadequate data security

During the settlement negotiations, T-Mobile denied many of these allegations and argued that the agreement was not an admission of guilt. 

Under the terms of a proposed agreement submitted to the Securities and Exchange Commission, T-Mobile states that under certain conditions outlined in the proposed agreement, it is capable of terminating the agreement at any time. 

Despite this, they acknowledge that they will have to compensate the impacted customers. The data breach that occurred at T-Mobile was not the only response to the data breach, as there have been other responses as well. 

Moreover, T-Mobile has also been accused of selling users’ information to marketers according to another report that appeared recently.

While it has been reported that T-Mobile has just launched a new program known as App Insights. In just over a year, it has gone from being a beta program to being fully operational.

A revised version of the FCC’s (Federal Communications Commission) rules on such attacks was proposed earlier this year. As a result of these new rules, companies and the people they serve will be able to communicate better with each other.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News