T-Mobile informed US regulators that a bad actor gained access to data on roughly a third of the company’s 110 million customers. The breach, which was active for approximately six weeks before being discovered and then shut down within 24 hours, reportedly did not access the most sensitive data, such as financial data. Customers were informed that hackers did not gain access to full data sets, though information compromised can still be useful for hackers for phishing and identity theft.

Meet DORA, the EU’s newly enacted Digital Operational Resilience Act, which is designed to strengthen IT security in the financial sector. It will be de rigueur for financial institutions; including banks, credit providers, securities and trading companies, and information and communication technology (ICT) organizations. DORA comes into full force in 2025, by which time companies and organizations should be compliant.