Skip to main content

AT&T just confirmed a massive data breach, and you’re probably affected

AT&T Storefront with logo.
AT&T

AT&T customers are waking up to some pretty unsettling news. The carrier is alerting its users about a substantial data breach affecting virtually all AT&T subscribers. No, this is not good.

The second-largest carrier in the U.S. has reported that customer data was illegally downloaded from a third-party cloud platform. The downloaded data includes phone call and text message records of “nearly all” AT&T cellular customers from May 1, 2022, to October 31, 2022. The compromised data also includes records from January 2, 2023, for a very small number of customers.

These stolen records also identify other phone numbers with which an AT&T wireless number interacted during the same period, including AT&T home phone customers. On the plus side, AT&T does not believe the breached data is publicly available and is working with law enforcement to resolve the issue. At least one person has been apprehended in the case.

The company assures customers that the downloaded data does not include call or text content, time stamps, or important user details such as Social Security numbers or dates of birth. AT&T cautions, however, that “while the data doesn’t include customer names, there are often ways to find a name associated with a phone number using publicly available online tools.”

If you have been affected by this breach, AT&T will contact you via text, email, or U.S. mail. In the meantime, current AT&T customers can contact the company to determine if they have been affected and what data may have been compromised. Former AT&T customers also have the option to make a request.

This is troubling news for anyone connected with AT&T. We hope to receive more information about the breach soon. Regrettably, data breaches impacting carriers are not uncommon.

For example, in March of this year, we reported another AT&T breach that affected 7.6 million current and 65.4 million former customers. Personal information, including names and Social Security numbers, was compromised during that attack. Last year, T-Mobile dealt with a similar issue that involved 37 million subscribers. Verizon, the nation’s top carrier, has also been affected by data breaches that have included both customer and employee data. Outside of mobile, Ticketmaster also got hit by hackers this year.

Bryan M. Wolfe
Bryan M. Wolfe has over a decade of experience as a technology writer. He writes about mobile.
T-Mobile investigating claims of massive hack involving customer data
T-Mobile storefront with corporate signage.

T-Mobile says it’s investigating claims of a major data breach that may affect as many as 100 million of its customers.

A message spotted on an underground forum on Sunday, August 15, came from someone claiming to be in possession of personal data belonging to 100 million people. The message made no mention of T-Mobile, but when the poster was contacted by news site Motherboard, it became apparent that the mobile company's customers were at the center of the alleged hack. The figure of 100 million would be remarkable as it's almost equal to T-Mobile's entire customer base.

Read more
T-Mobile reveals it ended 2020 with data a breach
The T-Mobile logo on a smartphone.

T-Mobile’s new year is not off to the greatest of starts after the carrier revealed details of a security breach affecting some of its customers.

A message on T-Mobile’s website says that a recently identified security incident may have allowed hackers to steal customer data such as phone numbers, number of lines subscribed to on an account, and call-related information collected as part of the normal operation of its wireless service.

Read more
Update your Twitter app right now if you’re on Android
Hand holding a Twitter phone

Twitter says it has patched a vulnerability inside its Android app that could have potentially let malicious actors view information of private accounts and take over profiles through an intricate back-end process. If a hacker managed to exploit the loophole, they could send direct messages and tweets on the target account’s behalf.

The social network claims so far it hasn’t discovered any affected user, nor found evidence of whether a third-party service has taken advantage of the bug. However, Twitter is reaching out to the people whose details may have been exposed. It’s unclear how long the vulnerability was left out in the open. The issue is not present on Twitter’s iOS app.

Read more