T-Mobile U.S. Faces $60M Penalty for Data Violations, Cfius Reports

T-Mobile U.S. Faces $60M Penalty for Data Violations, Cfius Reports

T-Mobile U.S., a subsidiary of Germany’s Deutsche Telekom, has been fined $60 million by the Committee on Foreign Investment in the United States (Cfius) for data protection violations.

According to Cfius, unauthorized access to sensitive data occurred between August 2020 and June 2021, affecting a small number of requests from investigative authorities.

Despite the breach, T-Mobile emphasized that its IT systems were not compromised and that the information remained within U.S. security agencies.

The company attributed the issue to technical problems following its 2020 merger with Sprint, stating, “This was not a breach or intrusion, and no bad actor was involved.”

The fine marks the highest ever imposed by Cfius, and while the exact date of the penalty was not disclosed, the agency criticized T-Mobile for delays in reporting the violations, which hindered the investigation.

In response, T-Mobile expressed its commitment to security, stating, “We are glad to have reached a resolution and look forward to continuing to work cooperatively with the law enforcement community to help keep the country and our customers safe.”