T-Cellular is going through a brand new lawsuit from the Washington State Lawyer Basic over its dealing with of a 2021 knowledge breach that compromised the non-public info of 79 million clients. The lawsuit, filed by Lawyer Basic Bob Ferguson, accuses the telecommunications big of failing to safe its programs regardless of figuring out of cybersecurity vulnerabilities for years previous to the breach.

Based on Ferguson, the breach uncovered delicate knowledge, together with names, addresses, cellphone numbers, Social Safety numbers, and driver’s license info. Greater than 2 million Washington residents had been affected, with no less than 183,000 having their Social Safety numbers stolen. The cyberattack, which began in March 2021, went undetected till August of that 12 months.

Ferguson acknowledged, “This significant data breach was entirely avoidable. T-Mobile had years to fix key vulnerabilities in its cybersecurity systems — and it failed.”

The hackers exploited an “easily guessable username and password” and a scarcity of sufficient safety monitoring. Ferguson’s lawsuit alleges that T-Cellular failed to satisfy trade cybersecurity requirements, which allowed the assault to go unnoticed for months. The breach was solely found after an outdoor supply reported that buyer knowledge was being bought on the darkish net.

Based on TechCrunch, the lawsuit additionally claims that T-Cellular misled clients in regards to the severity of the breach. Notifications despatched to affected people reportedly disregarded vital info, making it tough for them to evaluate their danger of id theft.

This isn’t the primary time T-Cellular has confronted authorized penalties for its cybersecurity failures. The corporate suffered no less than two knowledge breaches in 2023 alone, reaching its ninth main safety incident since 2018. In response to the lawsuit, a T-Cellular spokesperson advised The File that the corporate was shocked, stating that it had been in discussions with the Washington Lawyer Basic’s workplace in regards to the concern.

T-Cellular disagrees with the lawsuit’s claims however says it stays open to additional discussions. The corporate additionally emphasised that it has improved its cybersecurity practices lately.