AT&T Pays Hacker $370,000 to Remove Stolen Phone Data

Money | July 14, 2024, 1:44 p.m.

US telecom giant AT&T revealed that hackers stole call records from millions of customers, paying over $300,000 to a member of the hacking group ShinyHunters to delete the data. The hacker provided proof of deletion in a video and was paid in bitcoin. The money was laundered through cryptocurrency exchanges. A security researcher acting as a go-between also confirmed the payment. The hacker initially demanded $1 million but settled for less. The stolen data was deleted from a shared cloud server. Reddington informed AT&T after a hacker obtained his call logs and millions of other customers' data through a vulnerable Snowflake account. AT&T first learned of the breach in April, one of 150 companies targeted in a hacking spree. Snowflake accounts lacked multi-factor authentication, leaving them vulnerable. Ticketmaster, Santander, LendingTree, and Advance Auto Parts were also victims. AT&T did not respond to requests for comment.