Credit reporting company Experian and telecommunications provider T-Mobile entered into multistate settlements over data breaches sustained by both companies, Massachusetts Attorney General Maura Healey announced. The penalty for Experian totaled $13.67 million for breaches in 2012 and 2015, while T-Mobile’s penalty was $2.5 million for a 2015 breach. Per the settlements, Experian must offer five years of free credit monitoring to 15 million affected customers around the U.S. and implement stronger data protection practices. T-Mobile agreed to new “vendor management provisions,” including “specific contractual security requirements.”