{"id":24188,"date":"2024-03-20T03:10:15","date_gmt":"2024-03-20T11:10:15","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2024\/03\/20\/news-17918\/"},"modified":"2024-03-20T03:10:15","modified_gmt":"2024-03-20T11:10:15","slug":"news-17918","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2024\/03\/20\/news-17918\/","title":{"rendered":"The &#8216;AT&amp;T breach&#8217;\u2014what you need to know"},"content":{"rendered":"\n<p>Earlier this week, the data of over 70 million people was posted for sale on an online cybercrime forum. The person selling the data claims it stems from a 2021 breach at AT&amp;T. <\/p>\n<p>Back in 2021, a hacker named Shiny Hunters <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/atandt-denies-data-breach-after-hacker-auctions-70-million-user-database\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">claimed to have breached AT&amp;T<\/a> and put the alleged stolen data up for sale for $1 million for a direct sell. Fast forward three years and another threat actor calling themselves MajorNelson has leaked what they say is the same data.<\/p>\n<p>However, AT&amp;T denies (both in 2021 and, now, in 2024) that the data came from its systems, telling <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/att-says-leaked-data-of-70-million-people-is-not-from-its-systems\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">BleepingComputer<\/a> that it&#8217;s seen no evidence of a breach. No response was received to a follow-up question on whether the data could come from a third-party provider.<\/p>\n<p>The data posted online includes names, addresses, mobile phone numbers, date of birth, social security numbers, and other internal information. Almost the same set was offered for sale in 2021, but the encrypted date of birth and social security numbers have since been decrypted and added to the set as supplemental files for most records.<\/p>\n<p>Several <a href=\"https:\/\/www.troyhunt.com\/inside-the-massive-alleged-att-data-breach\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">sources<\/a> have verified the dataset (or parts thereof) contains valid data.<\/p>\n<h2 class=\"wp-block-heading\" id=\"h-what-to-do\">What to do<\/h2>\n<p>AT&amp;T still hasn&#8217;t confirmed that the data came from its systems, nor from a third party. However, there are some general actions you can take if you are an AT&amp;T customer:<\/p>\n<ul>\n<li><strong>Watch out for people posing as AT&amp;T.<\/strong>\u00a0Data breaches are great for scammers because they can contact you pretending to be from the (in this case alleged) breached company. If you receive an email, phone call or something similar from someone claiming to be from AT&amp;T be cautious and contact AT&amp;T directly to check it&#8217;s real.<\/li>\n<li><strong>Take your time.<\/strong>\u00a0Scammers often use themes that require urgent attention to hurry you into making a decision, filling in a form or giving away personal data. Take a step back and don&#8217;t give away any personal or financial information.<\/li>\n<li><strong>Set up identity monitoring.<\/strong>\u00a0<a href=\"https:\/\/www.malwarebytes.com\/identity-theft-protection\">Identity monitoring<\/a>\u00a0alerts you if your personal information is found being traded illegally online, and helps you recover after.<\/li>\n<\/ul>\n<h2 class=\"wp-block-heading\" id=\"h-check-if-your-data-has-been-breached\">Check if your data has been breached<\/h2>\n<p>Our Digital Footprint records now include the AT&amp;T data so you can check if your information has been exposed online. Submit your email address (it\u2019s best to submit the one you most frequently use) to our\u00a0<a href=\"https:\/\/www.malwarebytes.com\/digital-footprint\">free Digital Footprint scan<\/a> and we\u2019ll send you a report.<\/p>\n<div class=\"wp-block-malware-bytes-button mb-button\" id=\"mb-button-7ba16f0b-04e8-4679-9512-2f21a0971dcf\">\n<div class=\"mb-button__row u-justify-content-center\">\n<div class=\"mb-button__item mb-button-item-0\">\n<p class=\"btn-main\"><a href=\"https:\/\/www.malwarebytes.com\/digital-footprint\">SCAN NOW<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\" \/>\n<p><strong>We don&#8217;t just report on threats &#8211; we help safeguard your entire digital identit<\/strong>y<\/p>\n<p>Cybersecurity risks should never spread beyond a headline. Protect your\u2014and your family&#8217;s\u2014personal information by using\u00a0<a href=\"https:\/\/www.malwarebytes.com\/identity-theft-protection\" target=\"_blank\" rel=\"noreferrer noopener\">Malwarebytes Identity Theft Protection<\/a>.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2024\/03\/the-att-breach-what-you-need-to-know\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Data on over 70 million people that came from an alleged breach at AT&#038;T has been posted online. Here&#8217;s what you need to know. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[32,26699],"class_list":["post-24188","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-news","tag-personal"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24188","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=24188"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/24188\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=24188"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=24188"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=24188"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}