AT&T reports illegal download of data from about 109 million US accounts

Massive Data Breach at AT&T

In a significant cybersecurity incident, AT&T revealed that data from approximately 109 million customer accounts, including call and text records from 2022, was illicitly downloaded in April. The telecom giant disclosed that the FBI is currently investigating this breach, and at least one individual has been apprehended in connection with the illegal download of AT&T call logs from a third-party cloud platform.

Details of the Compromised Data

The exposed data encompasses records of calls and texts involving nearly all of AT&T’s cellular and landline users from May 2022 to October 2022. Crucially, the breach did not include the content of the communications or sensitive personal information such as social security numbers. However, it does involve call and text interaction details, including telephone numbers and aggregated call durations, and for some records, even cell site identification numbers. Additionally, a minor portion of data from January 2, 2023, affecting a very limited number of customers was also compromised.

Timeline of the Hack

AT&T first became aware of the breach on April 19, when a hacker claimed to have unlawfully accessed AT&T’s call logs. An internal investigation by AT&T determined that hackers managed to extract files containing customer call and text interaction records between April 14 and April 25. This breach also affected customers using mobile virtual network operators that rely on AT&T’s wireless infrastructure.

Response and Mitigation Efforts

Following the discovery, AT&T has taken several cybersecurity measures to fortify its systems and prevent further unauthorized access. Specifically, the company has secured the point of unlawful access used by the hackers. Collaboration with law enforcement is ongoing, and AT&T has worked closely with the Justice Department, which advised delaying public notification of the breach. Despite the magnitude of the incident, AT&T has stated that it does not believe the compromised data is publicly accessible and assured that the breach has not materially impacted its operations.

Public and Regulatory Reactions

The FBI has not yet provided any public comments regarding the investigation. As stakeholders and customers await more information, AT&T continues to face scrutiny regarding the handling and protection of user data.

Ensuring the security of user data remains a high-stakes priority for telecom companies, especially as they navigate the complex landscape of data breaches and cyber threats. This incident underscores the critical need for robust cybersecurity measures and vigilant monitoring to protect sensitive information.