Telekom's Data-Privacy Scrutiny and Sprint-Era Litigation Put a Resilient Operator to the Test

Deutsche Telekom faces VoLTE data leak scrutiny and $3.6B-$10.1B Sprint lawsuit, but core business grows and FCF guidance raised.

The German telecoms giant finds itself squeezed between a humming core business and an unusually dense cluster of reputational and legal distractions. A freshly disclosed vulnerability in its mobile network's voice-over-LTE technology has collided with a long-running shareholder lawsuit tied to the 2020 Sprint acquisition, leaving investors to weigh whether these are passing irritants or structural concerns.

Shares in Deutsche Telekom have held up reasonably well through the noise, trading around €28.50 in recent sessions — roughly 1.4 percent above the prior day's close and just shy of their 200-day moving average. That stability masks a tougher twelve-month picture: the stock has shed 9.1 percent over that stretch and sits about 17 percent below its 52-week high of €34.35.

Network Data Leak Draws Regulatory Attention

The most immediate headache stems from reporting by Bavarian public broadcaster BR, which uncovered that Telekom's VoLTE voice-calling infrastructure was transmitting IMEI numbers along with device and operating system details. The Federal Office for the Protection of the Constitution has flagged the issue as relevant, though the company says it already implemented network-level changes in August to strip out such metadata before it leaves the network.

What remains unclear is the scale of exposure — how many subscribers were affected and how long the data flow persisted. For now, no regulatory penalty or lawsuit has materialized from the disclosure, which limits the direct financial fallout. But the episode lands at an awkward moment, adding a data-handling question mark to a company already fielding legal uncertainty on another front.

Delaware Court Schedules Sprint Trial

That legal uncertainty centers on the Sprint acquisition, completed back in 2020. The Delaware Court of Chancery has now set preliminary hearing dates for the shareholder action, with the trial slated for October 2027. The damages sought span a wide range — between $3.6 billion and $10.1 billion — and while the trial date sits years away, the sheer size of the claims means interim rulings or new filings could trigger valuation haircuts well before any verdict.

The market's caution is understandable. Kepler Cheuvreux downgraded the stock from Buy to Hold on Wednesday, trimming its price target from €35 to €32, with explicit reference to the VoLTE vulnerability and competitive pressure at T-Mobile US. The move reflects a broader analyst tendency to separate the operational engine — which continues to perform — from risk factors that don't fit neatly into standard valuation models.

Operational Strength Provides the Floor

The engine itself remains in good shape. Second-quarter results showed organic net revenue growth of 3.3 percent, while adjusted EBITDA AL climbed 7.3 percent organically to €11.8 billion. Management also nudged its full-year free cash flow guidance upward, from "more than €19.8 billion" to "around €20.0 billion," with adjusted EBITDA AL tracking toward roughly €47.5 billion.

The balance sheet supports an active capital-return program, and the recent signal from T-Mobile US that it won't pursue a merger with its parent has removed one layer of structural uncertainty. Meanwhile, the acquisition of Polish fibre providers Fiberhost and Inea from Macquarie Asset Management — a deal worth around €1 billion, announced in mid-August and expected to close by the end of 2026, subject to regulatory approval — underscores the company's appetite for expansion beyond its home market.

Two Scenarios, Two Timelines

For bulls, the calculus is straightforward: the core business is compounding, buybacks are ongoing, and the Sprint litigation is a distant event that markets can reasonably treat as a tail risk until it gets closer. The Polish fibre purchases strengthen T-Mobile Polska's converged offering and add a growth vector outside Germany.

The bear case hinges on the interaction between uncertainty and time. Legal proceedings of this magnitude have a habit of generating early valuation pressure as details emerge, and the VoLTE affair — even with network fixes already applied — carries reputational risk that resists quantification. The 9.1 percent twelve-month decline suggests some of this is already priced in, but the gap to the 52-week high leaves room for disappointment as well as recovery.

The next catalysts arrive soon: an AI investor event on October 5, followed by third-quarter results on November 5. Both will test whether the operational momentum can continue to outshine the legal and reputational shadows gathering around the company.