{"id":24876,"date":"2024-07-12T06:10:06","date_gmt":"2024-07-12T14:10:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2024\/07\/12\/news-18606\/"},"modified":"2024-07-12T06:10:06","modified_gmt":"2024-07-12T14:10:06","slug":"news-18606","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2024\/07\/12\/news-18606\/","title":{"rendered":"“Nearly all” AT&T customers had phone records stolen in new data breach disclosure"},"content":{"rendered":"\n

In a d\u00e9j\u00e0-vu nightmare, US phone giant AT&T has notified<\/a> customers that cybercriminals managed to download phone call and text message records of “nearly all of AT&T cellular customers from May 1, 2022 to October 31, 2022 as well as on January 2, 2023”.<\/p>\n

In a filing<\/a> with the Securities and Exchange Commission (SEC), AT&T said:<\/p>\n

\n

\u201cOn April 19, 2024, AT&T Inc. (\u201cAT&T\u201d) learned that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.\u201d<\/p>\n<\/blockquote>\n

AT&T says the customer data was illegally downloaded from its workspace on a third-party cloud platform. This might be related to the Snowflake incidents<\/a> we have seen several of by now.<\/p>\n

In the statement, AT&T specifies which data it believes was stolen:<\/p>\n

\n

\u201cThe call and text records identify the phone numbers with which an AT&T number interacted during this period, including AT&T landline (home phone) customers. It also included counts of those calls or texts and total call durations for specific days or months.\u201d<\/p>\n<\/blockquote>\n

And which data is unlikely to be included:<\/p>\n

\n

\u201cThe downloaded data doesn\u2019t include the content of any calls or texts. It doesn\u2019t have the time stamps for the calls or texts. It also doesn\u2019t have any details such as Social Security numbers, dates of birth, or other personally identifiable information.\u201d<\/p>\n<\/blockquote>\n

Even though the data doesn\u2019t include customer names, there are many easy ways to find the name that’s associated with a phone number.<\/p>\n

This is the second time AT&T has disclosed a security incident this year. Back in March, AT&T confirmed<\/a> that 73 million people had been affected in a breach that people had been speculating about for some time<\/a>.<\/p>\n

Protecting yourself after a data breach<\/h2>\n

There are some actions you can take if you are, or suspect you may have been, the victim of a data breach<\/a>.<\/p>\n