“As part of the settlement, the telecom carrier must invest $15.75 million in cybersecurity enhancements and pay the U.S. Treasury an additional $15.75 million civil penalty.”
Four breaches across three years cost T-Mobile a $15.75 million fine. The other half is money T-Mobile spends on its own network and gets to call a penalty. The fixes it promises are multi-factor authentication and network segmentation, which a carrier holding millions of customer records should have had in 2021. The FCC fined T-Mobile $80 million in April for selling location data. Breaching customers is cheaper than selling them.