CFIUS hits T-Mobile with historic $60m fine for data breach

In an unusual enforcement action, the inter-agency committee stated that T-Mobile created a significant national security risk.

T-Mobile has been served with a $60m penalty for failing to take adequate measures to protect against unauthorized access to its data, and failing to promptly report a data breach, the Committee on Foreign Investment in the United States (CFIUS) has reported.

CFIUS rarely names companies involved in its enforcement

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in