CBS News reports:
AT&T has agreed to pay $13 million to settle a federal investigation into whether the mobile phone service provider failed to protect customer information in connection with a data breach last year, the Federal Communications Commission said Tuesday.
The FCC’s probe focused on how AT&T’s privacy, cybersecurity and vendor management practices may have played a role in the January 2023 breach, in which hackers penetrated the company’s cloud system. The breach exposed data belonging to nearly 9 million wireless customers.
As part of the settlement, AT&T entered a consent decree that requires the telecommunications giant to enhance its data governance practices, increase its supply chain integrity, and ensure appropriate processes and procedures in handling sensitive data.
Read more at CBS News.
Read the settlement (.pdf).