Cybersecurity Focusing on Cybersecurity Our customers depend on us to keep them connected. With bad actors around the world constantly attacking the security of corporate systems, we continue to accelerate our focus on protecting our customers and enhancing our cybersecurity measures. Keeping our network and systems secure and earning the trust of our customers is paramount to us. Transforming Our Cybersecurity Approach In 2021, we established the Cyber Transformation Office led by a Chief Cyber Transformation Officer. Reporting directly to the CEO, this department is focused on embedding cybersecurity competencies and a security- first mindset across our culture. Our Cybersecurity Trust and Protection organization has also been integrated into this new office to foster greater collaboration across the teams and the business. These leaders work collaboratively with other senior leaders on the Information Security and Privacy Council, with the mission to define, organize, and continuously communicate the strategic direction of cybersecurity and privacy for the company. The Cyber Transformation Office spearheads our holistic approach to cybersecurity management and includes state-of-the-art cybersecurity technology, stringent security protocols, rigorous monitoring and response operations, and compliance consistent with global industry standards. We combine strong oversight and governance controls with technical and physical safeguards, while incorporating core functions from the widely recognized National Institute of Standards and Technology (NIST) Cybersecurity Framework. Our Chief Cyber Transformation Officer and Chief S ecurity Officer provide reports four times a year to the Nominating and Corporate Governance Committee on T-Mobile’s data information and infrastructure security programs. Security-First Mindset Our holistic approach involves every employee— because we all have a part to play in keeping T-Mobile secure. We train employees throughout the year via i365 and other targeted cybersecurity trainings, which enlist everyone to help identify and remediate potential threats and provide engaging scenario-based training covering phishing attacks, good password hygiene, proper handling of customers’ privacy choices, and other topics. We’re committed to addressing every aspect of data security. While we have processes to identify and protect our systems, detect and respond to threats, and recover if attacks are successful, security incidents can still occur. We invest in internal expertise and work with top security experts from around the globe, leveraging their expertise to strengthen our capabilities and further protect T-Mobile and our customers. We have invested in strategic partnerships with Accenture, KPMG, and Mandiant—industry leaders in cybersecurity technology and services. Countering All Forms of Fraud Fraud continues to be an industry-wide problem that we are constantly working to deter. We offer customers a variety of safeguards against these criminal attacks to help them protect their personal information. Our award-winning support teams work with customers directly to address concerns about potential fraud or to discuss security measures available to them. We maintain security incident response plans to investigate and remediate incidents involving unauthorized access to personal data, and we are continually maturing our safeguards to respond to new risks. We recognize we’ll always have work to do in this ever-evolving space. 2021 CORPORATE RESPONSIBILITY REPORT SCAM SHIELD™ In 2020, T-Mobile launched Scam Shield™, making the Un-carrier the first major wireless provider to help protect every customer against robocallers, scammers, and fraudsters. No special device, app, or plan is required. Unlike a third-party app or other passive monitoring solutions, Scam Shield™ is built into our network, leveraging the power of T-Mobile’s entire network to keep our customers protected. Using AI, machine learning, and patented technologies, we analyze call behavior to protect customers around the clock, responding to new threats and updating protections every six minutes. In 2021, we added new features including improved Scam Reporting and eSIM support, as well as new patented network tools to further identify and block likely scam attempts. The spammers and scammers keep trying, but we’ve got their number: by December 2021, Scam Shield™ identified or blocked over 21 billion scam calls. That’s 700 calls intercepted per second. 21 billion scam calls identified or blocked OUR PEOPLE OUR COMMUNITIES THE NUMBERS AND SMALL PRINT 22 OUR COMPANY THE ENVIRONMENT OUR GOVERNANCE