Penalty Amount
$16,000,000
Connecticut, as part of a 40-state coalition, secured multistate settlements totaling over $16 million with Experian and T-Mobile related to data breaches in 2012 and 2015 that exposed consumers' personal information. Experian agreed to pay $12.67 million and implement enhanced data security measures, while T-Mobile agreed to pay $2.43 million and strengthen vendor management. Additionally, Experian Data Corp. paid $1 million to resolve a separate 2012 breach investigation, with all entities required to improve data protection practices.
Experian agreed to pay $12.67 million and implement a comprehensive information security program with zero-trust principles, due diligence, data minimization, and specific security requirements. T-Mobile agreed to pay $2.43 million and implement a vendor risk management program with contractual security requirements for vendors. Experian Data Corp. agreed to pay $1 million to improve vetting of third parties and maintain a Red Flags program. Experian also must offer 5 years of free credit monitoring to affected consumers.
In-house legal teams should review vendor agreements (particularly those involving data brokers or credit reporting agencies like Experian), customer agreements (such as telecom service contracts with T-Mobile), and any data processing addendums. Focus on clauses governing data security obligations, breach notification timelines and procedures, audit and inspection rights, indemnification for data breaches, data encryption and access control standards, incident response plans, data retention and disposal policies, and vendor oversight requirements. Changes may include strengthening security specifications (e.g., mandatory encryption, regular penetration testing), clarifying breach notification within 72 hours, requiring third-party security audits, enhancing vendor due diligence and monitoring provisions, and updating indemnification terms to cover regulatory fines and consumer redress.
Entity
Experian; T-Mobile
Industry
Data Broker$29.6M
Attorney General Jennifer Davenport joined a coalition of 48 states and territories in a $29.6 million settlement with Glenmark, a generic drug manufacturer, for allegedly conspiring to artificially inflate and manipulate prices, reduce competition, and restrain trade for numerous generic prescription drugs. The settlement includes cooperation in ongoing litigations and internal reforms to ensure fair competition.
$29.6M
Attorney General William Tong led a coalition of 48 states and territories in a $29.6 million settlement with Glenmark, a generic drug manufacturer, to resolve allegations of a widespread conspiracy to artificially inflate prices, reduce competition, and unreasonably restrain trade for numerous generic prescription drugs. The settlement includes cooperation from Glenmark in ongoing multistate litigations and internal reforms to ensure fair competition and compliance with antitrust laws.
$18.0M
Attorney General William Tong led a coalition of 42 attorneys general in a settlement with the bankruptcy trustee for 23andMe, resolving allegations from a 2023 data breach that compromised the genetic data of 6.9 million customers. The settlement includes $150 million in allowed claims, with $18 million paid from bankruptcy funds, and requires enhanced data security measures for the new entity holding the data.
Attorney General William Tong joined a coalition of 12 attorneys general in suing to block the $110 billion acquisition of Warner Bros. Discovery, Inc. by Paramount Skydance Corporation. The lawsuit alleges the merger violates Section 7 of the Clayton Act by substantially lessening competition in theatrical film distribution and basic cable television licensing, which would harm consumers through higher prices and reduced quality.
Attorney General William Tong and 48 other attorneys general submitted comments to the FCC urging stronger rules to prevent scammers from accessing legitimate telephone numbers for illegal robocalls. The coalition is responding to the FCC's proposed rules and asks for measures such as stronger certification, reporting, and prohibitions on number cycling.
$45.0M
Attorney General Tong announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform, failing to protect users from fraud, and not providing promised fraud protection and resolution services. The settlement requires Block to implement major reforms including real customer support, transparent communications, and security commitments, and reaffirms Block's commitment to distribute between $75 million and $120 million to compensate consumers as part of a separate CFPB settlement.