T-Mobile has agreed to a settlement totaling $500 million in a class-action lawsuit brought by customers after the company disclosed in August that sensitive data had been breached in a cyber attack.
In a court filing late Friday, the cellphone giant said it would pay $350 million to settle customer claims and spend $150 million over the next few years to strengthen its protection and cybersecurity technologies.
The breach affected 76.6 million people in the United States, according to the company. It exposed highly sensitive data, including customers’ first and last names, Social Security numbers and driver’s license information.
It was unclear how much individual T-Mobile customers would receive from the settlement, although the proposed settlement, filed in the U.S. District Court for the Western District of Missouri, stipulates that individual payments cannot exceed $2,500 .
At the time of the breach, T-Mobile said the compromised files included checking accounts as well as records of people who had applied for credit with the company.
In Friday’s filing, T-Mobile’s lawyers said the settlement agreement did not mean the company was admitting any wrongdoing. The breach was one of many that have occurred in the technology, banking and retail industries in recent years.
The company said in a statement: “As we continue to invest time, energy and resources to address this challenge, we are pleased to have resolved this class action consumer lawsuit.”