AT&T

AT&T is warning of a massive data breach where threat actors stole the call logs for approximately 109 million customers, or nearly all of its mobile customers, from an online database on the company's Snowflake account.
The company confirmed to Bleeping Computer that the data was stolen from the Snowflake account between April 14 and April 25, 2024.
In a Friday morning Form 8-K filling with the SEC, AT&T says that the stolen data contains the call and text records of nearly all AT&T mobile clients and customers of mobile virtual network operators (MVNOs) made from May 1 to October 31, 2022 and on January 2, 2023.

The stolen data includes:

  • Telephone numbers of AT&T wireline customers and customers of other carriers.
  • Telephone numbers with which AT&T or MVNO wireless numbers interacted.
  • Count of interactions (e.g., the number of calls or texts).
  • Aggregate call duration for a day or month.
  • For a subset of records, one or more cell site identification numbers.
The exposed records did not contain the content of the calls or texts, customer names, or any other personal information such as Social Security numbers or dates of birth.
Although the accessed logs do not contain sensitive information that directly exposes customer identities, the communications metadata can be used to correlate them with publicly available information and easily derive identities in many cases.