AT&T Data Breaches: A Chronology

Summary

This article discusses the multiple data breaches AT&T experienced in 2024, impacting millions of customers. We explore the details of each breach, the repercussions for AT&T and its customers, and the broader implications for data security in the telecommunications industry. Finally, we offer advice on protecting yourself from the fallout of these and future data breaches.

Protect your data without breaking the bankTrueNAS combines award-winning quality with cost efficiency.

** Main Story**

AT&T Data Breaches: A Chronology

AT&T, one of the largest telecommunications companies in the world, suffered multiple data breaches in 2024, exposing the personal information of millions of customers. These incidents not only impacted AT&T’s reputation and finances but also raised serious concerns about data security practices within the telecommunications industry.

The March Breach: Sensitive Information Exposed

The first major breach occurred in March 2024, when data belonging to approximately 7.6 million current AT&T account holders and 65.4 million former account holders was discovered on the dark web. This leaked data varied by customer and account but included sensitive information such as full names, email addresses, mailing addresses, phone numbers, Social Security numbers, dates of birth, AT&T account numbers, and passcodes.

Remediation Efforts and Legal Fallout

In response to the March breach, AT&T offered affected customers one year of complimentary credit monitoring, identity theft detection, and resolution services through Experian’s IdentityWorks. Additionally, they provided an insurance policy of up to $1,000,000 in coverage for identity theft and an identity restoration team to assist with the recovery process. Despite these efforts, the breach triggered a flurry of proposed class-action lawsuits against the company.

The April Breach: Call and Text Records Compromised

Just a month later, in April 2024, AT&T experienced another significant breach. This incident compromised the call and text message records of “nearly every” AT&T cellular network customer. The compromised records included telephone numbers, aggregate call duration data, and cell site information, potentially revealing the rough geolocation of AT&T customers. Crucially, however, the content of calls or texts, personal information such as Social Security numbers, or dates of birth were reportedly not exposed in this breach.

Delayed Disclosure and Further Investigation

Although the April breach occurred in April, AT&T did not publicly disclose the incident until July 2024. This delay stemmed from concerns raised by the Department of Justice and the FBI regarding potential risks to national security and public safety. The FBI launched an investigation into the incident, and AT&T engaged the cybersecurity firm Mandiant to assist with their internal investigation.

Financial and Reputational Impact

Moody’s, a credit rating agency, downgraded AT&T’s credit rating following the April breach, citing concerns about the company’s cybersecurity risk governance and management practices. The breach also led to another proposed class-action lawsuit, further damaging AT&T’s reputation.

Connection to the Snowflake Attacks

Investigations into the April breach revealed a connection to a broader attack campaign targeting customers of the cloud data platform Snowflake. Hackers exploited vulnerabilities in Snowflake’s systems to gain access to sensitive customer data. AT&T’s data was reportedly stored on a third-party cloud platform, which was later identified as a Snowflake instance.

Protecting Yourself from Data Breaches

The AT&T data breaches serve as a stark reminder of the importance of data security for both individuals and organizations. Here are some steps you can take to protect yourself:

• Be Vigilant: Monitor your financial accounts for any unauthorized activity.
• Report Fraud: If you suspect fraudulent activity, report it immediately to the relevant authorities.
• Secure Online Accounts: Use strong, unique passwords for all online accounts and enable two-factor authentication whenever possible.
• Monitor Credit Reports: Regularly review your credit reports for any suspicious activity.
• Be Wary of Phishing Scams: Be cautious of emails, text messages, or phone calls that request personal information.

It is important to note that information in this article is based on reports available up to March 14, 2025, and may change as new details emerge.