T-Mobile Data Breach Lawsuit: The $350 Million Settlement

The Breach

In August 2021, T-Mobile disclosed a major data breach affecting roughly 76 million current, former and prospective customers. Unlike some breaches limited to contact details, this one exposed sensitive identity data — names, addresses, dates of birth, driver’s license or other ID information and, for many people, Social Security numbers — exactly the combination criminals use to open accounts and commit identity theft. Financial and payment-card data was not part of the exposed set, but the identity data alone made this a serious incident.

It was one of several breaches to hit the carrier, which drew criticism for repeated security failures.

The Settlement

T-Mobile agreed to a $350 million settlement to resolve the resulting class-action litigation, and separately committed to spend about $150 million upgrading its data security — a notable acknowledgment that the problem was preventable. At the time, the $350 million fund was among the largest US data-breach settlements. Class members could file claims for cash, including reimbursement of up to $25,000 for documented out-of-pocket losses tied to the breach, payment for credit-monitoring and lost time, or a smaller flat cash payment.

The security-spending commitment mattered as much as the cash, since it targeted the root cause rather than only compensating after the fact.

What Customers Should Know

The claim window for this settlement has closed, but the protective steps remain the same for any breach that exposes Social Security numbers: consider a credit freeze, monitor your credit reports, and watch for identity-theft signs like unfamiliar accounts. Because breaches like this feed convincing phishing, be skeptical of unsolicited texts or calls claiming to be from your carrier, and verify anything through the official app or website.