On Friday, AT&T announced that the data of nearly all of their over 100 million customers was downloaded to a third-party platform in a security breach dating back to 2022. The affected parties include AT&T’s cellular customers, customers of mobile virtual network operators using AT&T’s wireless network, and other phone numbers that an AT&T wireless number interacted with during this time, including AT&T landline customers. The compromised data includes files containing AT&T records of calls and texts between May 1, 2022 and Oct. 31, 2022, as well as on Jan. 2, 2023. However, the breach did not include the content of any said calls or texts, nor the timestamps. It also doesn’t have any details such as Social Security numbers, dates of birth, or other personally identifiable information.
AT&T has shared advice to customers on what the breach means for their data safety and how to protect themselves. They do not believe that the data is publicly available but are unsure of what exactly is being done with it. The affected third-party cloud-based workspace has been secured, and AT&T is committed to protecting the information in their care. The company is contacting the customers whose data was compromised by the breach, and customers can check the status of their myAT&T, FirstNet, and business AT&T accounts to see if their data was affected through their account profile.
Until December 2024, those impacted by the data breach will be able to receive the phone numbers of the calls and texts compromised by the data breach. Current customers can request this data through their AT&T profile. Active AT&T wireless and home phone customers can get help through a specific link, while AT&T Prepaid customers can submit a data request. Prior customers who were with AT&T during the affected time period can also submit a data request to receive the phone numbers of the calls and texts that were part of the breach.
AT&T spokesperson Alex Byers expressed regret that the incident occurred and emphasized the company’s commitment to protecting the information of their customers. The breach has raised concerns about data security and privacy, as well as the need for companies to invest in robust cybersecurity measures to prevent such incidents from happening in the future. Customers are advised to monitor their accounts for any suspicious activity and to change their passwords regularly to enhance their data security.
Overall, the AT&T data breach has highlighted the importance of safeguarding personal information and the potential risks associated with storing data on third-party platforms. The company is taking steps to address the breach and assist affected customers in protecting their data. It serves as a reminder for individuals to remain vigilant in safeguarding their personal information and for companies to prioritize cybersecurity to prevent unauthorized access to sensitive data.
