T-Mobile Looks to Settle Cyberattack For $500M
July 25, 2022
On July 22, 2022, T-Mobile US entered into an agreement to settle a consolidated class action lawsuit asserting claims related to a 2021 criminal cyberattack involving unauthorized access to the Company’s systems in which certain information about a number of the Company’s current, former, and prospective customers was compromised. The lawsuit is currently pending in the U.S. District Court for the Western District of Missouri under the caption In re: T-Mobile Customer Data Security Breach Litigation, Case No. 21-md-3019-BCW.
The proposed settlement remains subject to preliminary and final court approval. If approved by the court, under the terms of the proposed settlement,the Company would pay an aggregate of $350.0 million to fund claims submitted by class members, the legal fees of plaintiffs’ counsel and the costs of administering the settlement. The Company would also commit to an aggregate incremental spend of $150.0 million for data security and related technology in 2022 and 2023.
The Company anticipates that, upon court approval, the
settlement will provide a full release of all claims arising out
of the cyberattack by class members, who do not opt out, against
all defendants, including the Company, its subsidiaries and
affiliates, and its directors and officers. The settlement
contains no admission of liability, wrongdoing or responsibility
by any of the defendants. Class members consist of all
individuals whose personal
information was compromised in the breach, subject to certain exceptions set forth in the agreement. The Company believes that terms of the proposed settlement are in line with other settlements of similar types of claims.
Final court approval of the terms of the settlement is expected as early as December 2022 but could be delayed by appeals or other proceedings. The Company has the right to terminate the agreement under certain conditions.
If approved by the court, the Company anticipates this settlement of the class action, along with other settlements of separate consumer claims that have been previously completed or are currently pending, will resolve substantially all of the claims brought by the Company’s current, former and prospective customers who were impacted by the 2021 cyberattack. In connection with the proposed class action settlement and the separate settlements, the Company expects to record a total pre-tax charge of approximately $400 million in the second quarter of 2022.
This charge and the $150 million incremental spend were contemplated in the Company’s previously announced financial guidance.