THE article discusses a significant court ruling involving T-Mobile and its failure to comply with Washington's data breach notification laws following a 2021 security incident that exposed 76 million records, including Social Security numbers. The ruling highlights the billion-dollar risk companies face if they do not achieve technical compliance with state notification laws.
T-Mobile's chosen method of notice, a text message to 361,030 Washington residents, was challenged in a lawsuit by the Washington Attorney General for allegedly violating consumer protection laws by not meeting the statutory requirements for data breach notifications.