FCC Orders T-Mobile to Deliver Better Cybersecurity

itwbennett writes: According to a consent decree published on Monday by the US Federal Communications Commission, T-Mobile must pay a $15.75 million penalty and invest the an equal amount 'to strengthen its cybersecurity program, and develop and implement a compliance plan to protect consumers against similar data breaches in the future.' The settlement stems from FCC investigations ‘focused on three major T-Mobile data breaches in 2021, 2022, and 2023, which impacted millions of its customers,’ writes Evan Schuman for CSOonline.com. ‘Implementing these practices will require significant — and long overdue — investments. To do so at T-Mobile’s scale will likely require expenditures an order of magnitude greater than the civil penalty here,’ the consent decree said. Notes Schuman: ‘One order of magnitude greater than the $15.75 million penalty would be $157.5 million.’