AT&T has announced that a major data breach has compromised the call and text records of nearly all its customers. The breach involved hackers illegally accessing data from a third-party cloud platform, affecting records from May 1, 2022, to October 31, 2022, with some data from early 2023 also compromised.
The stolen data includes phone numbers and cell site identification numbers, but not the content of calls or texts, Social Security numbers, dates of birth, or other personal identifiers. The breach impacts customers using AT&T’s network and landline customers who interacted with these cellular numbers.
AT&T is collaborating with cybersecurity experts and law enforcement to investigate the breach and secure its systems. The company confirmed that at least one individual involved in the hack has been apprehended. The Department of Justice, FBI, and Federal Communications Commission are also involved in the investigation.
The telecommunications giant is notifying affected customers through text, email, or mail, advising them to monitor their accounts for suspicious activity. AT&T assures customers that it does not believe the stolen data is publicly available but encourages vigilance.
Experts like John Scott-Railton from the University of Toronto’s Citizen Lab have emphasized the risks posed by such metadata, which can reveal detailed personal information. The breach has raised significant privacy and security concerns, prompting an ongoing investigation by multiple federal agencies.
AT&T is committed to protecting its customers’ information and is taking steps to prevent future breaches. The company is working with authorities to bring those responsible to justice and ensure the security of its systems.
