AT&T announced on Friday, July 12th, that the call and text message records of nearly all their cellular customers were exposed in a data breach.
In a filing with the U.S. Securities and Exchange Commission, AT&T disclosed that it discovered in April that customer data had been illegally downloaded from an AT&T workspace on a third-party cloud platform.
AT&T stated that they are collaborating with law enforcement to apprehend those responsible for the breach, with at least one individual already in custody.
“We have an ongoing investigation into the AT&T breach and we’re coordinating with our law enforcement partners,” the Federal Communications Commission announced on social media Friday morning.
What Type of Data was Exposed?
In a news release on Friday, AT&T clarified that the breached data does not include call or text content, personal information such as Social Security numbers, dates of birth, or other personal information.
“It also excludes some typical details found in usage records, like call or text timestamps,” the company added. Although the compromised data does not contain customer names, AT&T noted that it is often possible to use publicly available tools to associate a telephone number with a name.
“At this time, we do not believe the data is publicly accessible,” AT&T stated in the release.
Who Was Affected by the AT&T Data Breach?
In the SEC filing, AT&T reported that threat actors had exfiltrated files containing customer call and text interaction records from May 1 to October 31, 2022. The company also noted that the compromised data includes records from January 2, 2023, for a “very small number of customers.”
The breach also impacted customers of mobile virtual network operators (MVNOs) that utilize AT&T’s wireless network, as well as AT&T landline customers who interacted with these cellular numbers.
AT&T will notify affected customers via text, email, or U.S. mail. Customers can also check their online accounts to determine if they were affected.
What Actions Should AT&T Customers Take?
AT&T advises customers to remain vigilant against phone calls or text messages requesting personal, account, or credit card information.
If you suspect suspicious text activity:
- Do not reply. Forward the text to AT&T for assistance. Forwarded messages are free and do not count toward your text plan.
If you believe you are a target of fraud on your AT&T wireless number:
- Report it to AT&T’s fraud team. For fraud on other accounts, contact the customer service number on your bill for help.
Additionally, AT&T recommends only opening text messages from known and trusted sources and never responding to unknown senders with personal information.
AT&T has stated that credit card numbers and Social Security numbers were not exposed in the data breach, but if you are concerned about being exposed, you can follow this guidance from the Federal Trade Commission:
- Utilize any free credit monitoring services offered by the responsible company.
- Obtain free credit reports and review them for unfamiliar accounts or charges.
- Consider placing a free credit freeze or fraud alert. A credit freeze makes it harder for someone to open an account in your name. However, it will require a few extra steps to briefly unlock the freeze if you apply for something that requires a credit check. A fraud alert requires businesses to verify your identity before they issue new credit in your name.
- Regularly review your transactions to detect any fraudulent charges.
