Summary: The state of Washington has filed a lawsuit against T-Mobile, alleging the company failed to adequately secure personal data prior to a significant data breach in August 2021 that affected over 79 million customers. The lawsuit seeks financial damages and demands improvements in T-Mobile’s cybersecurity practices.
Threat Actor: Unknown Hacker | unknown hacker
Victim: T-Mobile | T-Mobile
Key Point :
- Washington’s attorney general claims T-Mobile was aware of cybersecurity vulnerabilities for years but failed to address them.
- The breach resulted in the theft of sensitive customer information, including Social Security numbers and driver’s license data.
- The lawsuit alleges T-Mobile provided inadequate notice to affected customers, impacting their ability to protect against identity theft.
- Technical deficiencies cited include weak credentials, lack of rate-limiting on login attempts, and poor monitoring of network access.
- T-Mobile expressed surprise at the lawsuit and is open to dialogue to resolve the issue.