T-Mobile to pay $350 million in settlement over massive hacking

Reuters

Published Jul 22, 2022 06:51PM ET

By Jonathan Stempel and Sara Merken

(Reuters) - T-Mobile US (NASDAQ:TMUS) Inc agreed on Friday to pay $350 million and spend an additional $150 million to upgrade data security to settle litigation over a cyberattack last year that compromised information belonging to an estimated 76.6 million people.

The preliminary settlement was filed with the federal court in Kansas City, Missouri.

It requires a judge's approval, which the second-largest U.S. wireless carrier said could come by December.

T-Mobile denied wrongdoing, specifically, including accusations that it breached its duties to protect customers' personal information and had inadequate data security.

The Bellevue, Washington-based company expects an approximately $400 million pre-tax charge in this year's second quarter for the settlement. It said it contemplated the charge and $150 million of spending in prior financial guidance.

T-Mobile disclosed the data breach last August, saying at the time it affected more than 47 million current, former and prospective customers.

The number soon grew past 50 million, and T-Mobile said in November its investigation uncovered an additional 26 million people whose personal information was accessed.

T-Mobile has said the information included names, addresses, birth dates, driver's license data and Social Security numbers.

Friday's settlement covered nationwide litigation combining at least 44 proposed class-action lawsuits.

Class members may receive cash payments of $25, or $100 in California, and some could receive up to $25,000 to cover out-of-pocket losses, settlement papers show. They will also receive two years of identity theft protection.