[piffey]

Go do a year in IR if you want some inside perspective -- and to shave a few years off your existence. Sounds about normal for a large telecommunications firm. These large firms don't have 30+ person IR teams on round the clock shifts distributed worldwide because nothing ever happens. T-Mobile just has some transparency and likely actual monitoring in place to detect these breaches instead of them just floating by until some threat actor sells the data somewhere public.