I’m sure T-Mobile already accounted for this lawsuit into their yearly budget set aside for legal fines. If the fine is less than the profits they earned from leaving the security risk in place, which they almost certainly are, then this is just a case business as usual.