"These data breaches will keep happening until we force change in corporate behavior," said AG Shapiro. "Experian and T-Mobile failed in their responsibility to safeguard consumers' personal information. Their systems were vulnerable to a massive data breach, and the personal identifying information for millions of Americans was put at risk. This settlement ensures that Experian & T-Mobile must do the right thing and fix the security failures that led to a preventable data breach."