Massive Data Breach at AT&T Impacts Vast Majority of Wireless Subscribers

Money | July 13, 2024, 6:23 a.m.

AT&T, a major American telecom provider, recently confirmed a security breach that exposed data of 'nearly all' its wireless customers and those of mobile virtual network operators (MVNOs) using its network. Threat actors gained unauthorized access to AT&T's workspace on a third-party cloud platform and extracted files containing customer call and text records from May to October 2022 and January 2023. This compromised data includes phone numbers, interaction details, and aggregate call duration, with some records revealing cell site identification numbers for potential location tracking. Former NSA hacker Jake Williams highlighted the significance of call data records in intelligence analysis. The breach, connected to other high-profile hacks, involved at least one arrest. Snowflake, the cloud provider involved, is now implementing additional security measures. Customers are advised to watch out for phishing and fraud attempts and can request their data from the breach. The cybercrime campaign targeted multiple companies and demanded significant ransom payments for stolen data.