AT&T revealed on Friday {that a} large knowledge hack, initially uncovered in April, might have been worse than beforehand thought.
The decision and textual content logs of “almost all” of its mobile clients have been uncovered within the breach.
“In April, AT&T discovered that buyer knowledge was illegally downloaded from our workspace on a third-party cloud platform,” the corporate mentioned in an announcement. “We launched an investigation and engaged main cybersecurity consultants to grasp the character and scope of the prison exercise. We’ve taken steps to shut off the unlawful entry level.”
The compromised knowledge consists of information containing AT&T information of calls and texts of “almost all” of AT&T’s mobile clients from Could 1, 2022 – October 31, 2022. Per CNN, on the finish of 2022, AT&T had 110 million wi-fi subscribers.
The corporate mentioned the information “doesn’t comprise the content material of calls or texts, private data corresponding to Social Safety numbers, dates of start, or different personally identifiable data.”
“Right now, we don’t consider that the information is publicly obtainable,” AT&T mentioned within the assertion. “We’re working with legislation enforcement in its efforts to arrest these concerned within the incident. We perceive that a minimum of one particular person has been apprehended.”
Clients can go to att.com/DataIncident for extra data.
[Original story below from 4/1/2024]
Present and former AT&T clients beware.
The cellular and web service supplier confirmed over the weekend the corporate suffered from a large knowledge breach that will have leaked the private data of an estimated 7.6 million present AT&T clients and 65.4 million former clients, totaling 73 million customers affected.
AT&T mentioned that, roughly two weeks in the past, the information set was leaked to the “darkish net.” It is unclear if the leak originated from AT&T or a third-party vendor.
Associated: ‘I Desire a Free Month’: Hundreds of Clients Livid at AT&T After Widespread Outages
Compromised knowledge might embody social safety numbers, full names, cellphone numbers, AT&T account data (numbers and passcodes), and e mail and mailing addresses.
“At present, AT&T doesn’t have proof of unauthorized entry to its methods leading to exfiltration of the information set. The corporate is speaking proactively with these impacted and will probably be providing credit score monitoring at our expense the place relevant,” the corporate mentioned in a launch. “As of as we speak, this incident has not had a fabric influence on AT&T’s operations.”
The corporate additionally clarified that the information “seems” to be from accounts created in 2019 or earlier.
Information of the leak was initially posted on X by tech account @vx-underground on March 17, which claimed that “the stolen knowledge is reputable” and was leaked onto darkish net platform Breached.
In the present day 70,000,000+ information from an unspecified division of AT&T had been leaked onto Breached. No data is obtainable to point whether or not it’s a third get together compromise, or which ‘division’ this knowledge is from.
Regardless, upon evaluation, we are able to verify the stolen knowledge is reputable.
— vx-underground (@vxunderground) March 17, 2024
Earlier this yr, in February, AT&T suffered a mass outage that affected roughly 75% of the corporate’s complete clients. CEO John Stankey confirmed that clients who had been “most affected” by the service disruption will obtain a $5 credit score to their account.
Associated: Maine Hacked in Knowledge Breach, 1.3 Million Residents At Threat
“Moments like these are a take a look at of resilience,” Stankey wrote on the time in an inside memo. “This isn’t our first community outage, and it will not be our final – sadly, it is the truth of our enterprise. What issues most is how we react, adapt, and enhance to ship the service our clients want and count on.”
AT&T was down over 10.5% yr over yr as of Monday morning.
