Teollimi

AT&T data breach

Was I affected?

AT&T confirmed a breach affecting about 109 million people, exposing phone numbers and call and text records. You are in scope if you had an AT&T wireless line (or used a carrier running on AT&T's network) between May and October 2022; AT&T sent notices to affected customers.

AT&T breach facts
AnnouncedJul 12, 2024
When it happenedStolen April 14-25, 2024; records cover May 1 - Oct 31, 2022 (and Jan 2, 2023 for some)
People affected109 million
Data exposedPhone numbers, Call and text records and Other details
Through a vendorSnowflake
StatusConfirmed by the company or a regulator filing

What happened

AT&T told the SEC that criminals copied call and text records for nearly all of its wireless customers from a workspace on the Snowflake cloud platform in April 2024. The logs show which numbers called or texted each other, how often, call lengths and, for some, cell site IDs that hint at location, but not message content or names. Reports put the count at about 109 million customer accounts, including people on AT&T-based prepaid and MVNO brands.

What should I do?

  1. Treat emails, texts and calls that mention AT&T or your phone records as suspect; don't click links or share codes, and contact the company through its official app or website.
  2. Add an AT&T wireless account PIN and number-lock to make SIM swaps and port-outs harder.
  3. Warn close contacts that scammers may know you talk to them, and verify urgent money requests by calling back.
  4. Consider using end-to-end encrypted apps for sensitive calls and messages.

Is there a settlement?

Covered by the AT&T $177 million settlement ($28M fund for this incident); the claim deadline was December 18, 2025, so new claims are closed.

Other AT&T breaches: Mar 30, 2024

XRedditWhatsApp

Check the other services you use →

Sources