Trends
T-Mobile fined $60M for information protection negligence
T-Mobile has been fined $60 million by the Committee on Foreign Investment in the United States (CFIUS) for negligence in a data breach.
Headline
T-Mobile has been fined $60 million by the Committee on Foreign Investment in the United States (CFIUS) for negligence in a data breach.
Context
OUR TAKE Information breaches due to negligence can affect the state of national security as well as the stability of society, so T-Mobile should work with CFIUS to strengthen its compliance posture and obligations and is committed to working with the U.S. government to ensure compliance with future obligations. As part of their social responsibility, large corporations and organisations have a duty to keep the data of their users and employees secure. — Iydia Ding, BTW reporter The Committee on Foreign Investment in the United States (CFIUS) has sanctioned T-Mobile for failing to prevent or disclose unauthorised access to sensitive customer data.
Evidence
Pending intelligence enrichment.
Analysis
T-Mobile is owned by Deutsche Telekom , and as part of its acquisition of Sprint, T-Mobile agreed to protect consumer data. At the time of its merger with Sprint, it signed a national security agreement with CFIUS, which was the reason for the fine earlier this year. T-Mobile said it encountered a technical issue during its integration with Sprint that affected information in a ‘small number of law enforcement information requests.’ It claimed that the issue was promptly addressed at the time and reported ‘in a timely manner.’ CFIUS does not usually name companies that are fined, but T-Mobile was named in an effort to push the company to comply with national security regulations related to the acquisition. T-Mobile’s failure to report promptly will result in its inability to conduct an investigation to rule out potential harm to national security. Also read: What is RFID protection? Safeguarding data in a wireless world
Key Points
- T-Mobile has been fined $60 million by the Committee on Foreign Investment in the United States (CFIUS) for negligence in a data breach.
- T-Mobile has been named by the CFIUS to push the company to comply with national security rules related to acquisitions.
Actions
Pending intelligence enrichment.
