Dissent Doe 
@PogoWasRight@infosec.exchange
Blogger/journalist at databreaches.net and pogowasright.org. As a retired healthcare professional, breaches in the healthcare sector are my priority. The header pic is Indy, a Siberian husky we rescued in 2016 after I read how nobody wanted her because she was so difficult. She is now living her best life and is a mushball with me.
infosec.exchange
In January 2025, the WA attorney general sued T-Mobile over a data breach that affected 2M residents (this was the 79M T-Mobile breach). One of the issues in the litigation was that T-Mobile didn't properly notify those affected of the breach -- it omitted telling them in SMS notifications that their SSN had been acquired.
For background, see https://www.atg.wa.gov/news/news-releases/ag-ferguson-files-lawsuit-against-t-mobile-massive-data-breach
Now a court has agreed with the state that the text message notifications did not comply with the state's breach notification law:
https://www.seattletimes.com/business/t-mobile-violated-wa-data-breach-notification-law-judge-rules/
T-Mobile says it will appeal.
#databreach #incidentresponse #notifications #TMobile
