Menu
Two US telecom companies to pay $3.5 million for data breach

Two US telecom companies to pay $3.5 million for data breach

Sister telecom carriers stored personal information on servers accessible on the Internet

Two sister mobile and telecom service providers will pay a combined US$3.5 million after the U.S. Federal Communications Commission found that they were storing customers' personal data on unprotected servers accessible over the Internet.

TerraCom and YourTel America failed to adequately protect the personal information of more than 300,000 customers, the FCC said. The settlement stems from a 2013 incident when an investigative reporter found customer records from the companies' low-income Lifeline programs online, the agency said in an October 2014 proposal to fine the companies.

In March and April 2013, the reporter was able to access more than 128,000 confidential records and documents submitted by subscribers and applicants for Lifeline service, a program that provides telecom subsidies to low-income U.S. residents.

The customer information available online included names, addresses, Social Security numbers and driver's licenses, the FCC said in a press release. After the reporter contacted the companies, they reported his investigation to the FCC as a data breach.

"Consumers rightly expect that companies will take every reasonable precaution to protect their personal information," Travis LeBlanc, chief of the FCC's Enforcement Bureau, said in a statement. "It is a breach of customer trust for a company to promise to protect personal information while failing to take reasonable measures to protect sensitive customer information from unauthorized access by anyone with a search engine."

Neither company immediately returned a message seeking comment on the settlement.

The settlement ensures that the companies take "concrete steps" to improve security, LeBlanc added.

In addition to the $35 million civil penalty, the settlement requires the companies to notify all customers whose information was subject to unauthorized access and provide complimentary credit monitoring services. The companies have also agreed to take several steps to improve their security practices.

The settlement also resolves an FCC investigation into YourTel's failure remove Lifeline subscribers from the program in a timely manner. After the FCC told YourTel in 2012 to remove ineligible customers from the program, the company continued to provide the subsidized service into 2013, the agency said. As a result, the company overbilled the Lifeline program, the FCC said.

TerraCom, based in Oklahoma City, offers mobile Lifeline service in 14 states. YourTel, based in Kansas City, Missouri, provides mobile Lifeline service in eight states and wireline Lifeline service in three.

Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's email address is grant_gross@idg.com.

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags telecommunicationregulationsecurityTravis LeBlancdata breachU.S. Federal Communications CommissionYourTel AmericaTerraComgovernment

Slideshows

Top 50 defining moments of the New Zealand channel in 2016

Top 50 defining moments of the New Zealand channel in 2016

Reseller News looks back on a tumultuous 12 months for the New Zealand channel, assessing the fallout from a year of sizeable industry change. Whether it be local or global mergers and acquisitions, distribution deals or job changes, the channel that started the year differs somewhat to the one set to finish it - Reseller News assesses the key moments that made 2016.​

Top 50 defining moments of the New Zealand channel in 2016
​Hewlett Packard Enterprise honours high achieving NZ channel

​Hewlett Packard Enterprise honours high achieving NZ channel

Hewlett Packard Enterprise honoured its top performing Kiwi partners at the second running of its HPE Partner Awards in New Zealand, held at a glitzy ceremony in Auckland. Recognising excellence across eight categories - from distributors to resellers - the tech giant celebrated its first year as a standalone company, following its official split from HP in 2015.

​Hewlett Packard Enterprise honours high achieving NZ channel
Nutanix treats channel partners to Christmas cruise

Nutanix treats channel partners to Christmas cruise

Nutanix recently took to the seas for a Christmas Cruise around Sydney Harbour with its Australia and New Zealand staff, customers and partners to celebrate a stellar year for the vendor. With the sun out, they were all smiles and mingled over drinks and food.

Nutanix treats channel partners to Christmas cruise
Show Comments