Cybercriminals Target AT&T Customers, Breach Phone and SMS Records – Krebs on Security

Money | July 12, 2024, 1:44 p.m.

AT&T Corp. recently disclosed a data breach involving phone call and text message records of around 110 million customers. The breach, initially detected in April, involved cyber intruders gaining access to a cloud database protected only by a username and password, compromising customer interactions between May 1, 2022, and January 2, 2023. While no personally identifiable information such as Social Security numbers or dates of birth was breached, some records did include data that could determine a customer's approximate location. The FBI requested AT&T to delay notifying affected customers, citing national security concerns. The breach is linked to a larger data theft involving multiple companies storing sensitive data with minimal security measures. Despite the ongoing threat of data breaches, companies often fail to prioritize robust security protocols, leaving customer data vulnerable. AT&T does not anticipate significant financial impact from the breach, highlighting the urgent need for improved cybersecurity measures across industries.