Court Rules
All enforcement actions
InvestigationLow RiskMultistate

CT AG Tong Probes T-Mobile's 2021 Data Breach Affecting 53M

T-MobileMarch 2, 2022Connecticut Attorney General

Consumers Affected

53,000,000

Summary

In March 2022, Connecticut Attorney General William Tong announced that Connecticut is co-leading a multistate investigation into T-Mobile's 2021 data breach, which affected over 53 million individuals. The breach compromised sensitive data including names, dates of birth, Social Security Numbers, and driver's license information. Tong urged affected consumers to take protective steps such as credit monitoring and freezes.

Contract Impact

In-house legal teams should review all vendor, customer, and data processing agreements for clauses related to data security, breach notification timelines, data retention limits, and third-party data sharing. Specific attention should be paid to requirements for encryption of sensitive data like Social Security Numbers and driver's licenses, incident response procedures, indemnification for data breaches, and audit rights to verify security practices. Agreements may need amendments to mandate stronger encryption standards, shorten breach notification windows, limit collection/retention of high-risk personal data, and impose stricter controls on subprocessors.

Contract Search Terms

data breach notification clauseencryption standardsdata retention scheduledata sharing agreementincident response planindemnification clauseaudit rightssubprocessor clausespersonal information definitionsecurity incident reporting

Violation Types

Entity Details

Entity

T-Mobile

Industry

Telecommunications

Official Sources

Related Enforcement Actions

CT

Glenmark

$29.6M

Attorney General Jennifer Davenport joined a coalition of 48 states and territories in a $29.6 million settlement with Glenmark, a generic drug manufacturer, for allegedly conspiring to artificially inflate and manipulate prices, reduce competition, and restrain trade for numerous generic prescription drugs. The settlement includes cooperation in ongoing litigations and internal reforms to ensure fair competition.

CT

Glenmark

$29.6M

Attorney General William Tong led a coalition of 48 states and territories in a $29.6 million settlement with Glenmark, a generic drug manufacturer, to resolve allegations of a widespread conspiracy to artificially inflate prices, reduce competition, and unreasonably restrain trade for numerous generic prescription drugs. The settlement includes cooperation from Glenmark in ongoing multistate litigations and internal reforms to ensure fair competition and compliance with antitrust laws.

CT

23andMe

$18.0M

Attorney General William Tong led a coalition of 42 attorneys general in a settlement with the bankruptcy trustee for 23andMe, resolving allegations from a 2023 data breach that compromised the genetic data of 6.9 million customers. The settlement includes $150 million in allowed claims, with $18 million paid from bankruptcy funds, and requires enhanced data security measures for the new entity holding the data.

CT

Paramount Skydance Corporation

Attorney General William Tong joined a coalition of 12 attorneys general in suing to block the $110 billion acquisition of Warner Bros. Discovery, Inc. by Paramount Skydance Corporation. The lawsuit alleges the merger violates Section 7 of the Clayton Act by substantially lessening competition in theatrical film distribution and basic cable television licensing, which would harm consumers through higher prices and reduced quality.

CT

Federal Communications Commission

Attorney General William Tong and 48 other attorneys general submitted comments to the FCC urging stronger rules to prevent scammers from accessing legitimate telephone numbers for illegal robocalls. The coalition is responding to the FCC's proposed rules and asks for measures such as stronger certification, reporting, and prohibitions on number cycling.

CT

Block, Inc.

$45.0M

Attorney General Tong announced a $45 million multistate settlement with Block, Inc., the company behind Cash App, for misleading consumers about the safety of the platform, failing to protect users from fraud, and not providing promised fraud protection and resolution services. The settlement requires Block to implement major reforms including real customer support, transparent communications, and security commitments, and reaffirms Block's commitment to distribute between $75 million and $120 million to compensate consumers as part of a separate CFPB settlement.