Connecticut and other states have obtained two multistate settlements with Experian concerning data breaches it experienced in 2012 and 2015 that compromised the personal information of millions of consumers nationwide. The coalition also obtained a separate settlement with T-Mobile in connection with the 2015 Experian breach, which impacted more than 15 million individuals who submitted credit applications with T-Mobile. Under the settlements, the companies have agreed to improve their data security practices and to pay the states a combined amount of more than $16 million. Connecticut will receive a total of $886,175 from the settlements.

In September 2015, Experian, one of the big-three credit reporting bureaus, reported it had experienced a data breach in which an unauthorized actor gained access to part of Experian’s network storing personal information on behalf of its client, T-Mobile.

The breach involved information associated with consumers who had applied for T-Mobile postpaid services and device financing between September 2013 and September 2015, including names, addresses, dates of birth, Social Security numbers, identification numbers (such as driver’s license and passport numbers), and related information used in T-Mobile’s own credit assessments.

142,789 Connecticut residents were impacted by the 2015 breach. Neither Experian’s consumer credit database, nor T-Mobile’s own systems, were compromised in the breach.

Connecticut co-led a 40-state multistate group which has obtained separate settlements from Experian and T-Mobile in connection with the 2015 data breach. Under a $12.67 million settlement, Experian has agreed to strengthen its due diligence and data security practices going forward.

Anyone who was part of the 2019 class action settlement is eligible to enroll in extended credit monitoring services. Affected consumers can enroll in the 5-year extended credit monitoring services. The enrollment window will remain open for 6 months.