Telekom's Network Security Scrutiny Puts a Hard-Won Rally to the Test

Deutsche Telekom shares fell 2.7% after a probe found device data transmitted during calls; company says fix is in place, but investor concerns linger.

Shares in Deutsche Telekom stumbled on Thursday, sliding 2.7 percent to €28.19, after a Bavarian broadcaster's investigation revealed that the operator's mobile networks had been transmitting device identifiers and operating system data during calls. The dip follows a separate session in which the stock shed 2.9 percent to close at €28.13, leaving the equity roughly 18 percent below its 52-week high of €34.35.

The technical detail at the heart of the story is straightforward enough. More than 70 test calls conducted by Bayerischer Rundfunk showed that in several instances, IMEI numbers along with handset and OS metadata were passed to the calling party. The company attributes the issue to VoLTE configurations and says it already implemented network changes in August to strip out such metadata at the network boundary before any onward transmission.

For a telecom operator whose entire business model rests on customer confidence in its infrastructure, the optics are awkward — and the timing is worse. Management had spent the early summer rebuilding credibility with investors, lifting its free cash flow guidance and expanding its buyback programme. Now, just weeks after those positive signals, the narrative has shifted to data protection.

The core question for investors

What matters now is whether this incident remains a contained technical glitch — one that the company says it has already fixed — or whether it metastasises into something more serious. The bear case hinges on regulatory attention, potential legal costs, or a slow bleed of customer trust that never shows up in a single quarter's numbers but erodes the growth story over time.

There is precedent for caution. Kepler Cheuvreux had already downgraded the stock from Hold to a more cautious stance at the end of August, trimming its price target from €35 to €32 on the back of lacklustre second-half market trends and intensifying competition at T-Mobile US. Erste Group moved to Hold back in May, and JPMorgan cut its price objective in April, albeit while keeping a positive rating. In other words, scepticism about near-term momentum predates the security scare by some margin.

The bull case remains operational

The fundamental picture, however, has not deteriorated. Second-quarter net revenue grew organically by 3.3 percent to €29.9 billion, while adjusted EBITDA AL expanded by 7.3 percent on the same basis to €11.8 billion. Management has lifted its 2026 free cash flow forecast from over €19.8 billion to roughly €20.0 billion and topped up the ongoing share repurchase programme by up to €3 billion.

Strategically, the company is also repositioning itself. The €1 billion acquisition of Polish fibre providers Fiberhost and Inea from Macquarie Asset Management, agreed in mid-August, would transform T-Mobile Polska from a mobile-only player into a fully converged operator. The deal brings more than 300,000 Inea customers and a Fiberhost network passing over 1.4 million households. The financial close, however, is not expected until the end of 2026 — the integration story is real, but it is not yet written.

The removal of long-running merger speculation around T-Mobile US also clears a source of strategic overhang, meaning the market no longer has to price in a potential M&A scenario.

Where the risks concentrate

The bearish scenario is not difficult to construct. Security vulnerabilities in mobile networks strike at the heart of what a telecom operator sells. If the scale of the test-call findings is confirmed, the potential fallout includes reputational damage, regulatory inquiries, and — in the worst case — customer churn. None of these effects would show up in the next earnings release, but they could weigh on the medium-term growth narrative.

There is also the technical picture to consider. The stock has yet to recover from a 12-month decline of 11 percent, and a second negative storyline — network security layered on top of competitive pressure — would complicate the investment case considerably. Should the recent downgrade prove to be the start of a broader re-rating rather than an isolated call, the shares could face further downside.

What to watch next

The immediate test comes on 5 October, when the company hosts its AI Investor Event, followed by third-quarter results on 5 November. Those two dates should reveal whether operational strength can outshine the security debate — or whether the two narratives compound into a broader overhang.

For now, the assessment hinges on a simple distinction. If the metadata issue is genuinely resolved and no new cases or regulatory probes emerge, Thursday's decline looks like a pause in a fundamentally intact story. If the situation escalates, with authorities or further media investigations picking up the thread, the convergence of a reputation issue with existing competitive concerns could push the shares meaningfully lower.