T-Mobile agrees to a million-dollar payout to its customers for data breach in the U.S.

Posted date 01/04/2025

In August 2021, an attack on the mobile network operator T-Mobile in the United States, compromised the personal data of more than 76 million customers. The data breach included customers names, addresses and Social Security numbers, among others. After the cyberattack occurred, a class action lawsuit was filed over the incident, involving several U.S. prosecutors offices and courts.

The lawsuit claims that the massive data breach was a direct result of T-Mobile's lack of accountability and its failure to comply with industry cybersecurity standards. It further notes that more such incidents had already occurred in previous years.

T-Mobile denied any wrongdoing in the data breach. However, the following year it agreed to pay $350 million to settle the class action lawsuit over the incident, and in 2024 it agreed to pay a $15.75 million civil penalty to settle a Federal Communications Commission (FCC) investigation into this and previous data breaches.

Of the $350 million T-Mobile agreed to pay, it will begin reaching customers on April 1, 2025. From that fund, each customer who submitted a complaint could receive up to $25,000 depending on the level of damage caused.