T-Mobile's 10-K Item 1C cybersecurity disclosure references two previously disclosed cybersecurity incidents: an August 2021 cyberattack and a January 2023 cyberattack. Both resulted in class action lawsuits, mass arbitration claims, and (for the January 2023 incident) regulatory inquiries. The Company states it has incurred and may continue to incur significant costs that may have a material adverse effect on its business. No new incident is reported in this filing; details on attack vectors, affected counts, and data types are not provided in this Item 1C narrative.