AT&T has reached a settlement over the 2023 data breach involving customer data, agreeing to pay a $13 million fine.

AT&T failed to ensure that a third-party vendor adequately protected the telecom carrier's customers, regulators say.

The FCC said that the mandatory changes in the settlement's terms will likely require AT&T to make significant investments that far exceed the $13 million fine.

AT&T has agreed to pay $13 million to settle a Federal Communications Commission (FCC) investigation into a data breach that affected 8.9 million customers. The breach occurred in January 2023 and was traced back to a third-party cloud vendor used by AT&T.