Re:T-Mobile investigating claims of 100M customer data breach
by studentrob on Sunday August 15, 2021 @11:40PM
(#28194720)
Thank you for that context. It seems like breaches are happening every month now. What do you think needs to happen to ensure these gigantic companies secure data? I can imagine (a) new legislation enabling bigger, swifter fines or (b) anti-trust action. Do you think we should prioritize one over the other, do both, or something else?
Re:T-Mobile investigating claims of 100M customer data breach
by silisili on Monday August 16, 2021 @12:04AM
(#28194835)
I left TMo in 2018, when their 'forgot password' link sent me my actual password, via email.
Re:T-Mobile investigating claims of 100M customer data breach
by denysvitali on Monday August 16, 2021 @01:04AM
(#28195090)
Re:T-Mobile investigating claims of 100M customer data breach
by asdfaoeu on Monday August 16, 2021 @01:09AM
(#28195109)
A relevant quote from there "What if this doesn't happen because our security is amazingly good?"
Re:T-Mobile investigating claims of 100M customer data breach
by aloisdg on Monday August 16, 2021 @04:22AM
(#28196024)
oh boy...
Re:T-Mobile investigating claims of 100M customer data breach
by junon on Monday August 16, 2021 @05:14AM
(#28196266)
I remember this happening in real time. People were losing their minds over it. I really hope that PR rep got fired, they have no business doing anything related to telecommunications.
Re:T-Mobile investigating claims of 100M customer data breach
by EveYoung on Monday August 16, 2021 @04:47AM
(#28196130)
This reads like a parody account.
Re:T-Mobile investigating claims of 100M customer data breach
by art-vandelay on Monday August 16, 2021 @12:16AM
(#28194877)
Absolutely agree that the incentives have to change!
What does the FCC consider to be "reasonable measures to protect the confidentiality of its customers data"? Is there a document somewhere that outlines the best practices they expect you to follow?
I might be able to better convince my employer to prioritize security work if I had something like that to point to.
Re:T-Mobile investigating claims of 100M customer data breach
by simfree on Monday August 16, 2021 @12:12AM
(#28194858)
So the only fines that T-Mobile has paid are for the rural call call completion issues then?
Crazy that they can get away with regional and nationwide voice outages, SSNs and TINs repeatedly being leaked en masse, and the only fines they get are for rural call completion...
https://www.fcc.gov/document/settlement-t-mobile-rural-call-...
In 2017, the FCC determined that T-Mobile had violated federal law in a data breach involving customer credit information [1]. There was reportedly no fine because Congress has imposed a strict one-year statute of limitations on FCC enforcement actions.
In 2020, the FCC charged T-Mobile with again violating federal law in failing to protect customer location information [2]. The FCC proposed a $91.6M fine, widely criticized as insufficient at the time [3-4]. I don't believe the FCC has finalized or collected that penalty.
There have been several other incidents, including in 2018 [5], 2019 [6], early 2020 [7], and late 2020 [8].
I hope there has not been a new data breach. But if there has been, this is the latest in a pattern, and the incentives have to change.
[1] https://www.nexttv.com/news/fcc-admonishes-t-mobile-breach-1...
[2] https://www.fcc.gov/document/fcc-proposes-916m-fine-against-...
[3] https://docs.fcc.gov/public/attachments/FCC-20-27A4.pdf
[4] https://docs.fcc.gov/public/attachments/FCC-20-27A5.pdf
[5] https://www.theverge.com/2018/8/24/17776836/tmobile-hack-dat...
[6] https://www.bleepingcomputer.com/news/security/t-mobile-disc...
[7] https://www.bleepingcomputer.com/news/security/t-mobile-data...
[8] https://www.bleepingcomputer.com/news/security/t-mobile-data...