Court Rules
All enforcement actions
InvestigationLow RiskMultistate

CT AG Tong Probes T-Mobile's 2021 Data Breach Affecting 53M

T-MobileMarch 2, 2022Connecticut Attorney General

Consumers Affected

53,000,000

Summary

In March 2022, Connecticut Attorney General William Tong announced that Connecticut is co-leading a multistate investigation into T-Mobile's 2021 data breach, which affected over 53 million individuals. The breach compromised sensitive data including names, dates of birth, Social Security Numbers, and driver's license information. Tong urged affected consumers to take protective steps such as credit monitoring and freezes.

Contract Impact

In-house legal teams should review all vendor, customer, and data processing agreements for clauses related to data security, breach notification timelines, data retention limits, and third-party data sharing. Specific attention should be paid to requirements for encryption of sensitive data like Social Security Numbers and driver's licenses, incident response procedures, indemnification for data breaches, and audit rights to verify security practices. Agreements may need amendments to mandate stronger encryption standards, shorten breach notification windows, limit collection/retention of high-risk personal data, and impose stricter controls on subprocessors.

Contract Search Terms

data breach notification clauseencryption standardsdata retention scheduledata sharing agreementincident response planindemnification clauseaudit rightssubprocessor clausespersonal information definitionsecurity incident reporting

Violation Types

Entity Details

Entity

T-Mobile

Industry

Telecommunications

Official Sources

Related Enforcement Actions

CT

National Highway Traffic Safety Administration

Connecticut Attorney General William Tong joined a coalition of states and local governments in filing suit against NHTSA over its rule weakening fuel economy standards for new passenger cars and light trucks. The lawsuit alleges the rule violates the agency’s statutory mandate and the Administrative Procedure Act; no penalty or final remedy is reported.

CT

U.S. Environmental Protection Agency

Connecticut Attorney General William Tong joined a multistate coalition suing the EPA over its repeal of greenhouse gas pollution limits for power plants and separately filed a notice of intent to sue over regulation of existing gas plants. The coalition asks the court to overturn the repeal and restore the protections; the release reports no monetary penalty or final order.

CT

Sandoz Inc. and Fougera Pharmaceuticals Inc.

$400.0M

Connecticut Attorney General William Tong announced a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. resolving allegations that the generic drug manufacturers conspired to inflate prices, limit competition, and restrain trade. The settlement includes consumer restitution and injunctive reforms; court approval was being sought.

CT

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 21 attorneys general in submitting a comment letter opposing a DHS rule that allows certain affirmative asylum applications to be referred to removal proceedings without an asylum officer interview. The coalition argues the rule violates federal law and harms asylum seekers, including unaccompanied children; this was a policy opposition letter, not a privacy enforcement action.

CT

NextEra Energy and Dominion Energy

Connecticut and Massachusetts co-led a coalition protest urging FERC to reject the proposed NextEra Energy-Dominion Energy merger. The coalition argued that the merger could increase market power and threaten energy affordability, reliability, and competition; the release does not report a final enforcement decision or penalty.

CT

Unspecified home improvement contractors

Connecticut officials warned residents about potential home improvement scams before an approaching nor’easter, including unlicensed contractors, high-pressure sales tactics, and demands for full payment upfront. The release provides consumer guidance on checking contractors and contract requirements; it does not announce an enforcement action or penalty against a named entity.