AT&T says it will begin notifying consumers about a data breach where cybercriminals stole phone records of “nearly all” of its cellular and landline customers
Item 1.05 Material Cybersecurity Incidents. On April 19, 2024, AT&T Inc. … AT&T : Unlawful access of customer data AT&T : AT&T Addresses Illegal Download of Customer Data Lily Hay Newman / Wired : The Sweeping Danger of the AT&T Phone Records Breach Brian Krebs / Krebs on Security : Crooks Steal Phone, SMS Records for Nearly All AT&T Customers Gabe Hauari / USA Today : How to know if you were affected by the AT&T data breach and what to do next Rob Beschizza / Boing Boing : AT&T admits that hackers stole ‘nearly all’ customers' phone records Lorenzo Franceschi-Bicchierai / TechCrunch : What the AT&T phone records data breach means for you Michael Shonk / The Mobile Report : AT&T, Boost, Consumer Cellular, And More Impacted By Data Breach Jay Bonggolto / Android Central : AT&T data breach compromised phone records of nearly all its customers Jon Brodkin / Ars Technica : Nearly all AT&T subscribers' call records stolen in Snowflake cloud hack David DiMolfetta / Nextgov/FCW : Dozens of federal agencies' call data potentially exposed in AT&T breach Emma Roth / The Verge : AT&T breach leaked call and text records from ‘nearly all’ wireless customers Joseph Cox / 404 Media : Hackers Steal Text and Call Records of ‘Nearly All’ AT&T Customers Michael Tsai / mjtsai.com : Huge AT&T Data Breach John Gruber / Daring Fireball : AT&T Only Learned of Massive 2022 Data Breach This April; Delayed Revealing It at the Request of U.S. Law Enforcement Cal Jeffrey / TechSpot : AT&T discloses another massive data breach containing phone records of “nearly all” its customers Pierluigi Paganini / Security Affairs : New AT&T data breach exposed call logs of almost all customers Daniel Levi / Tech Startups : AT&T Hacked: AT&T confirms hackers stole records of 109 million US customers in a massive data breach Aaron Gregg / Washington Post : AT&T says hacker stole data on ‘nearly all’ of its wireless customers WATE-TV : How to safeguard personal information after AT&T reveals hack John Johnson / Newser : The AT&T Hack: ‘Yeah, This Is Really Bad’ Nick Heer / Pixel Envy : Massive Records Breach Affects AT&T and Carriers Which Use Its Network Omar Gallaga / CNET : Latest AT&T Data Breach Hits ‘Nearly All’ Cellular Customers: What to Know Jeffrey Burt / Security Boulevard : Advance Auto Parts: Data of 2.3 Million People Stolen in Breach Nate Nelson / Dark Reading : AT&T Breach May Also Impact Millions of Boost, Cricket, H2O Customers Bill Alpert / Barron's Online : Snowflake Stock Falls as AT&T Reports Month's Old Data Theft. It Has a Bigger Issue. Maria Deutscher / SiliconANGLE : AT&T discloses data breach affecting ‘nearly all’ cellular customers Grace Dean / Business Insider : AT&T says hackers stole the call and text records of almost all of its wireless customers Artie Beaty / ZDNet : AT&T suffers another major data breach, this one affecting ‘nearly all’ wireless customers CNBC : AT&T says hackers stole records of nearly all cellular customers' calls and texts Jason Cross / Macworld : Massive AT&T data breach exposes records of nearly all its customers' calls and texts Brandon Vigliarolo / The Register : Break-in at ‘third-party cloud platform’ leaked 110M customer records, says AT&T Jasper Hamill / The Stack : Is Snowflake the ‘third-party cloud platform’ caught up in massive AT&T data heist? Lucas Ropek / Gizmodo : Cybercriminals Stole Text and Call Records From ‘Nearly All’ of AT&T's Customers Jeff Baumgartner / Light Reading : AT&T is working with authorities to track down ‘threat actors’ … Kyle Alspach / CRN : Massive AT&T Breach Linked To Snowflake Attacks: Report Roger Fingas / Pocket-lint : AT&T says an attack leaked call and text records for ‘nearly all’ its customers Steve Zurier / SC Media : Massive AT&T breach linked to cloud IT service provider Snowflake Kevin Raposo / KnowTechie : AT&T: ‘nearly all’ of your phone records were leaked in data breach Kellen / Droid Life : AT&T Had a Big Data Breach for “Nearly All” Customers Martin Hodás / Neowin : Nearly all AT&T cellular customers affected by massive data theft. Here is what you can do Harry Baldock / Total Telecom : AT&T data breach leaked “nearly all” of its customers mobile numbers iClarified : Major AT&T Hack: Phone Call and Text Records of ‘Nearly All’ Customers Stolen Leigh Mc Gowran / Silicon Republic : AT&T data breach includes records of ‘nearly all’ cell customers Alex Scroxton / ComputerWeekly.com : AT&T loses ‘nearly all’ phone records in Snowflake breach Lawrence Bonk / Engadget : Massive AT&T data breach impacted nearly every single customer Matt Milano / WebProNews : AT&T Breach Impacts ‘Nearly All’ Customers' Call and Text Records Anthony Spadafora / Tom's Guide : Massive AT&T data breach hits 109 million customers — call logs and text messages stolen by hackers Christian Vasquez / CyberScoop : Phone, text message records of ‘nearly all’ AT&T customers stolen Joseph Cox / 404 Media : Sources: John Binns, a US citizen who has been incarcerated in Turkey and indicted for allegedly hacking T-Mobile in 2021, is linked to the AT&T data breach Sumit Adhikari / Android Headlines : AT&T data breach exposed call and text records of “nearly all” customers Laura Bratton / Quartz : A massive AT&T hack exposed ‘nearly all’ customers' phone numbers and call logs Cybersecurity and Infrastructure Security Agency : AT&T Discloses Breach of Customer Data PYMNTS.com : AT&T Says Call, Text Records of ‘Nearly All’ Customers Stolen The Hill : AT&T security breach exposes call, text data from almost all customers Cynthia B Brumfield / Metacurity : CDK Global Paid Hackers $25 Million, Will Provide Dealers Compensation, Reports Threads: @eshumarneedi : I truly don't understand how the telecom industry gets away with stuff like this. Every single customer! How is that even possible? This is worse than three Boeing planes falling apart or Microsoft's questionable security practices. Literally every single phone and text message log from every AT&T customer has leaked. … Josh Billinson / @jbillinson : When the $7 “AT&T BREACH SETTLEMENT” Venmo notification hits five years from now Josh Billinson / @jbillinson : As an AT&T customer who almost exclusively uses iMessage, I am deeply concerned that this hacker will believe I am a recluse with no friends who only ever gets texts about Amazon and DoorDash deliveries. Mastodon: Marcus / @gerowen@mastodon.social : This is why I really prefer using #Signal and other end-to-end encrypted options for messaging, making my phone calls, etc. — Headline: The Sweeping Danger of the AT&T Phone Records Breach — Subtitle: Telecom giant AT&T says a major data breach has exposed the call and text records of “nearly all” of its customers, epitomizing the dire state of data security. … @mhoye@mastodon.social : It's underappreciated how permanent an identifier your phone number is. — Outside the poorest 10% of society, people are _more likely to change their names_ than their phone numbers. — So, whoever's got this data also has an approximately perfect social map of AT&T's customers. … X: @fcc : We have an ongoing investigation into the AT&T breach and we' re coordinating with our law enforcement partners. Joseph Cox / @josephfcox : It is mind boggling how many breaches are due to hackers breaking to Snowflake accounts. Ticketmaster. Santander. Now AT&T call records. Mandiant found hundreds of Snowflake credentials exposed. It really can be as easy as go to Telegram, use creds https://www.404media.co/... [image] @autismcapital : ATT hack highlights the importance for encrypted messaging apps like Signal and others. Using them does not make you a criminal, it makes you someone who values themselves and has self agency to protect their lives. Chris Krebs / @c_c_krebs : Noteworthy here: AT&T received a National Security Exception from DOJ under the SEC Reporting Requirements. First such exception I'm aware of. [image] Joseph Cox / @josephfcox : AT&T says it learned of the breach in April. It found hackers had broken into a third-party cloud service used by the telecom giant (AT&T told me it was Snowflake, the center of an ever increasing number of high profile breaches). Here is what AT&T said https://www.404media.co/... [image] Joseph Cox / @josephfcox : Senator Ron Wyden says these breaches will keep happening until telecoms face billions of dollars of fines for their cybersecurity mistakes. Points to the FCC https://www.404media.co/... [image] Bijan / @bijanstephen : every day there's a new headline like this. nobody will face any consequences, and there's nothing you can do about it. to be american is to be powerless before megacorporations and bad actors. you have no rights they are bound to respect, and no recourse when you're fucked John Scott-Railton / @jsrailton : @ATT @SnowflakeDB 4/ Americans have grown numb to breach notifications. The @ATT breach is so bad it should wake everyone up. Unless big telcos face massive financial penalties for these megabreaches, they will continue. Shashank Joshi / @shashj : Incredible sensitive data. This is what the NSA did with US phone meta-data more than a decade ago through MAINWAY, a contact-chaining system. https://www.electrospaces.net/ ... See also @RidT's description of the system here https://www.washingtonpost.com/ ... [image] @dystopiabreaker : the best way to avoid catastrophic data breaches is to not collect mass data Joseph Cox / @josephfcox : FBI confirms in a statement just now that it worked with AT&T to delay announcement of the breach due to national security and/or public safety concerns. During this time, AT&T and FBI investigated, shared intelligence https://www.404media.co/... [image] Ali / @merrux : @josephfcox Why was att letting this data out unencrypted? Makes me wonder what else was stoken from snowflake @jeremybiltz : Not great, Bob. Not my mobile carrier, but incredibly concerning. Also... SMS is basically open text in the air. Never send important or sensitive info via text. Use a secure app. Bob / @bob_hlbok : Honestly, at this point, it's a very thin line between data breach and 3rd party business parties. @bax1337 : use signal. Jose Pino / @jofpin : As time goes by, I am completely sure that cybersecurity will be the next bubble within the next 36 months. Cyberattacks are becoming increasingly intense. https://x.com/... Joseph Cox / @josephfcox : Breaking: hackers stole call and text records for “nearly all” AT&T customers. Shows which phone numbers a customer called or texted. A staggering and unprecedented data breach. Data usually only available to authorities; now hackers got it https://www.404media.co/... @benlovejoy : Includes details of who called or messaged whom during a six-month period ... Barry Schwartz / @rustybrick : Hope no one looks at my call logs and sees how unpopular I really am..... Dare Obasanjo / @carnage4life : Every week, there's a revelation of a data breach or ransomware payment made by an institution critical to daily life. Telcos, banks, hospitals, etc. It's depressing to realize that practically every database with our private data is available on the dark web for a price. [image] Jacob Silverman / @silvermanjacob : “one of the biggest breaches of private communications data in recent memory” https://www.bloomberg.com/... LinkedIn: Runa Sandvik : I spoke to Lorenzo Franceschi-Bicchierai about the AT&T data breach. I'm still angry about it and I'm not even in it. … Forums: Hacker News : Hackers Steal Phone, SMS Records for Nearly All AT&T Customers r/neoliberal : Nearly all AT&T cell customers' call and text records exposed in a massive breach r/technology : What the AT&T phone records data breach means for you r/wallstreetbets : AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach r/hacking : AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach r/technology : Massive AT&T data breach exposes call logs of 109 million customers Lobsters : AT&T: Unlawful Access of Customer Data BeauHD / Slashdot : American Hacker In Turkey Linked To Massive AT&T Breach
Context & Ripple Effects
AT&T’s customer-notification process follows disclosure that call and text metadata for nearly all of its cellular and landline customers was accessed through a third-party cloud service. The company says law-enforcement coordination delayed disclosure.
The episode extends a pattern of large-scale telecom customer-data incidents, including T-Mobile’s disclosure of a breach affecting roughly 37 million customers. Related coverage also reports an unverified alleged connection between this incident and a person previously linked to the 2021 T-Mobile hack.
First-order effects
- AT&T must notify a customer base spanning nearly all of its cellular and landline accounts, while customers must assess exposure from stolen calling and texting records rather than account-password or payment-card data.
- The carrier faces immediate pressure to explain the safeguards around the third-party cloud environment and to manage investigation, customer support, and law-enforcement coordination.
Second-order effects
- Other telecom providers and enterprises holding sensitive customer records in cloud services will face renewed pressure to review access controls, logging, and vendor oversight.
- Because phone metadata can reveal patterns of contact, affected customers may face heightened concern over targeted fraud or impersonation, increasing the value of clear breach guidance from carriers.
Third-order effects
- If similar incidents continue, security accountability will shift further from a company’s own network perimeter toward the controls governing shared cloud data stores and their customers’ access.
- The scale of telecom metadata exposure could intensify scrutiny of how long carriers retain customer records and what safeguards are required for data that maps communications relationships.
The trend: Large breaches are making cloud-held metadata and third-party access management a central security and governance risk for telecom operators.