A Washington judge ruled T-Mobile broke the state's breach notification law 722,060 times over its 2021 hack. The court said its text alerts were too thin and left out legally required detail. People whose Social Security numbers leaked got told nothing about it, while people whose data was safe still got a notice. Getting breached is one liability. The notice you send is a separate one, with its own penalty count. Draft and test your breach notice against the statute now, not mid-incident.