AT&T Releases Details of Breached Data

This past April, AT&T discovered that there was a data breach in one of its workspaces through a third-party cloud platform. Proper and necessary steps were then taken immediately afterward. This resulted in customer data being illegally downloaded from the affected station. AT&T then proceeded to begin an investigation in order to assess and process what exactly happened.

Part of the process required the company to directly hire cybersecurity experts to secure the illegal access point and uncover the amount of data stolen, who was affected, and any other details pertaining to the illegal data breach. AT&T is also cooperating with law enforcement, and at least one suspect has been arrested.

As of their most recent news release, the company has determined that “the compromised data includes files containing AT&T records of calls and texts of nearly all of AT&T’s cellular customers, customers of mobile virtual network operators (MVNOs) using AT&T’s wireless network, as well as AT&T’s landline customers who interacted with those cellular numbers between May 1, 2022 – October 31, 2022. The compromised data also includes records from January 2, 2023, for a very small number of customers. The records identify the telephone numbers an AT&T or MVNO cellular number interacted with during these periods. For a subset of records, one or more cell site identification number(s) associated with the interactions are also included.”

Fortunately, AT&T claims that the breached data does not include call or text content, personal information such as dates of birth and Social Security numbers, or other details that can identify individuals. However, AT&T also notes that there are public tools that can often connect phone numbers with names.

Furthermore, “The breach also included AT&T landline customers who interacted with those cell numbers,” according to CNN. On another note, except for Canadian calls, no other international calls were affected by the breach.

To help alleviate the issue, AT&T is also notifying customers involved and saying it would help by providing resources for them.

According to WIRED, AT&T paid over $300,000 to a member of the hacking team ShinyHunters to “delete the data and provide a video demonstrating proof of deletion.”