AT&T revealed on Friday that a massive data hack, first exposed in April, may have been worse than previously thought.
The call and text logs of “almost all” of its mobile customers were exposed in the breach.
“In April, AT&T learned that customer data had been illegally downloaded from our workspace to a third-party cloud platform,” the company said in a statement. “We launched an investigation and engaged leading cybersecurity experts to understand the nature and extent of the criminal activity. We have taken steps to shut down the illegal access point.”
The compromised data includes files containing AT&T call and text data of “almost all” AT&T mobile customers from May 1, 2022 to October 31, 2022. For CNNat the end of 2022, AT&T had 110 million wireless subscribers.
company said the data “does not contain the content of phone calls or texts, personal information such as social security numbers, dates of birth or other personally identifiable information.”
“At this time, we do not believe the data is publicly available,” AT&T said in the statement. “We are working with law enforcement in their efforts to arrest those involved in the incident. We understand that at least one person has been apprehended.”
Customers can visit att.com/DataIncident for more information.
(Original story below from 4/1/2024)
Current and former AT&T customers beware.
Mobile and Internet service provider long confirmed over the weekend, the company suffered a massive data breach that may have leaked the personal data of approximately 7.6 million current AT&T customers and 65.4 million former customers, with a total of 73 million affected users.
AT&T said that, roughly two weeks ago, the data set was discovered on the “dark web.” It's unclear whether the leak originated from AT&T or a third-party vendor.
Connected: 'I want a free month': Thousands of angry AT&T customers after widespread outages
Compromised data may include social security numbers, full names, phone numbers, AT&T account information (pass numbers and codes), and email and postal addresses.
“Currently, AT&T has no evidence of unauthorized access to its systems resulting in exfiltration of the data set. The company is proactively communicating with those affected and will provide credit monitoring at our expense where possible ,” the company said in a release. “As of today, this incident has not had a material impact on AT&T's operations.”
The company also clarified that the data “appears” to be from accounts created in 2019 or earlier.
News of the leak was first posted on X by tech account @vx-underground on March 17, which claimed the “stolen data is legitimate” and was discovered on the dark web platform Breached.
Today over 70,000,000 records from an unspecified division of AT&T were leaked to Breached. There is no information available to indicate if this is a third party compromise or which 'division' this data is from.
Regardless, after review, we can confirm that the stolen data is legitimate.
— vx-underground (@vxunderground) March 17, 2024
Earlier this year, in February, AT&T suffered a mass outage that affected approximately 75% of the company's total customers. CEO John Stankey confirmed that customers who were “most affected” by the service outage will receive a $5 credit to their account.
Connected: Maine hacked in data breach, 1.3 million residents at risk
“Moments like these are a test of resilience,” Stankey wrote at the time an internal memo. “This is not our first network outage and it won't be our last – unfortunately, it's the reality of our business. What matters most is how we react, adapt and improve to deliver the service our customers they need and expect.”
AT&T was down up 10.5% year over year as of Monday morning.