CFIUS Fines T-Mobile $60 Million for Data Breach and National Security Violations

Overview

The Committee on Foreign Investment in the United States (CFIUS) has imposed a $60 million fine on T-Mobile US for failing to prevent unauthorized access to sensitive data and for failing to report the breach in a timely manner.

CFIUS Role and Responsibilities

CFIUS is a U.S. interagency committee that reviews foreign investments in the United States to assess potential national security risks. The committee is chaired by the Treasury Department and includes representatives from several other agencies, including the Departments of Defense, Justice, and Homeland Security.

T-Mobile's Violations

CFIUS found that T-Mobile failed to implement adequate cybersecurity measures to protect sensitive data, which resulted in a data breach that exposed the personal information of millions of customers.

Additionally, CFIUS determined that T-Mobile failed to report the breach to the committee in a timely manner, which hindered the government's ability to assess the potential national security risks associated with the breach.

Consequences and Impact

The $60 million fine is the largest civil penalty ever imposed by CFIUS. The fine reflects the seriousness of T-Mobile's violations and the importance of protecting sensitive data and national security.

Lessons Learned

The CFIUS fine against T-Mobile serves as a reminder to businesses of the importance of cybersecurity and compliance with CFIUS regulations.

Additional Resources

• Committee on Foreign Investment in the United States (CFIUS)
• Statement from Treasury Secretary Janet L. Yellen on CFIUS Fine