T-Mobile is the subject of two class-action suits following its latest data breach
A pair of class action suits have been filed against T-Mobile after last week’s data breach
Besides looking to profit by selling personal data belonging to T-Mobile customers, obtaining the unique IMEI belonging to T-Mobile subscribers’ phones could allow the hackers to perform what is known as a SIM-swap attack allowing bad actors to receive one-time passwords or get access to two-factor authentication codes. This could allow a cybercriminal to hijack a T-Mobile customer’s phone allowing him/her access to the victim’s financial accounts.
previously applied for credit with T-Mobile.”
One suit claims that T-Mobile was “reckless” with its subscribers’ personal data
The CCPA allows statutory damages in a private right of action between $100 and $750 per customer per violation, or actual damages, whichever is greater. The plaintiffs also seek injunctive relief to protect T-Mobile customers from future data breaches. The filing also delves into past issues that the carrier has had with data breaches.
numbers, drivers’ licenses, government identification numbers, Social Security numbers, dates of birth, and T‐Mobile account PIN numbers) “in a reckless manner.” The plaintiffs also say that the computer system employed by T-Mobile to store this important personal data was “in a condition vulnerable to cyberattacks.”
The court filing adds that T-Mobile was aware of the risks of not taking proper steps to secure its subscriber’s personal data. The potential crimes that the hackers can commit with the stolen information include “fraudulently applying for unemployment benefits, opening new financial accounts in Class Members’ names, taking out loans in Class Members’ names, using Class Members’ information to obtain government benefits (including unemployment or COVID relief benefits), filing fraudulent tax returns using Class Members’ information, obtaining driver’s licenses in Class Members’ names but with another person’s photograph and providing false information to police during an arrest.”
The plaintiffs in this suit seek damages, punitive damages, court costs, and attorneys’ fees, prejudgement interest, and any other relief that the court feels is warranted.