Verizon, T-Mobile, Sprint, and AT&T Hit With Class Action Lawsuit Over Selling Customers’ Location Data

The lawsuits come after a Motherboard investigation showed AT&T, Sprint, and T-Mobile sold phone location data that ended up with bounty hunters, and The New York Times covered an instance of Verizon selling data.

On Thursday, lawyers filed lawsuits against four of the country’s major telecommunications companies for their role in various location data scandals uncovered by Motherboard, Senator Ron Wyden, and The New York Times. Bloomberg Law was first to report the lawsuits.

The news provides the first instance of individual telco customers pushing to be awarded damages after Motherboard revealed in January that AT&T, T-Mobile, and Sprint had all sold access to the real-time location of their customers’ phones to a network of middlemen companies, before ending up in the hands of bounty hunters. Motherboard previously paid a source $300 to successfully geolocate a T-Mobile phone through this supply chain of data.

“Through its negligent and deliberate acts, including inexplicable failures to follow its own Privacy Policy, T-Mobile permitted access to Plaintiffs and Class Members’ CPI and CPNI,” the complaint against T-Mobile reads, referring to “confidential proprietary information” and “customer proprietary network information,” the latter of which includes location data.

The complaints against T-MobileAT&Tand Sprint are largely identical, and all also mention how each carrier ultimately provided data to a company called Securus, which allowed low level law enforcement to locate phones without a warrant, as The New York Times first reported in 2018. The complaint against Verizon focuses just on the Securus case. However, Motherboard previously reported how Verizon sold data that ended up in the hands of another company, called Captira, which then sold it to the bail bondsman industry.

We are primarily funded by readers. Please subscribe and donate to support us!

Do you know anything else about location data selling? You can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, OTR chat on jfcox@jabber.ccc.de, or email joseph.cox@vice.com .

The class in each lawsuit covers an approximation of the telcos’ individual customers between April 30, 2015 and February 15, 2019: 100 million for Verizon, 100 million for AT&T, 50 million for T-Mobile, and 50 million for Sprint. Each lawsuit is filed in the name of at least one customer for each telco, and they are seeking unspecified damages to be determined at trial, the complaints read.

The thrust of the complaints center around whether each telco violated section 222 of the Federal Communications Act (FCA), which says that the companies are obligated to protect the CPI and CPNI of its customers, and whether the Plaintiff’s and Class Members’ CPNI was accessible to unauthorized third parties during the relevant period.

The suits were filed by Z LAW, a “consumer protection law firm,” according to its website.

1556995328153-Screenshot-2019-05-04-at-204148
A section of the complaint against T-Mobile. Image: Screenshot.

motherboard.vice.com/en_us/article/3k3dv3/verizon-tmobile-sprint-att-class-action-lawsuit-selling-phone-location-data

 

Views:

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.