AT&T confirms information leak affecting 73 million clients after spending two weeks denying it
In short: After spending two weeks repeatedly denying {that a} large cache of information belonging to 73 million individuals got here from the corporate, AT&T has now confirmed that it originates from present and former clients. The data incorporates full names, electronic mail addresses, mailing addresses, telephone numbers, social safety numbers, delivery dates, AT&T account numbers, and four-digit pin passcodes.
When the huge trove of information was posted on the market on a cybercrime discussion board early this month, AT&T stated it didn’t originate from its methods, despite the fact that the poster stated it was stolen from a 2021 breach of the telecommunications big.
AT&T says there’s nonetheless no indication their methods had been breached. Nonetheless, the corporate has now confirmed that the info belongs to 7.6 million present clients and 65.4 million former clients. In line with an announcement, it isn’t but recognized whether or not the info in these fields originated from AT&T or one in every of its distributors.
The explanation so many former clients have been impacted is because of the information set apparently relationship from 2019 or earlier.
BleepingComputer reports that this may not be the primary time this information has been put up on the market. In 2021, a hacker referred to as Shiny Hunters claimed to be promoting the stolen information of 73 million AT&T clients for a beginning value of $200,000. It included names, addresses, telephone numbers, social safety numbers, and delivery dates. AT&T on the time denied it got here from the corporate.
Supply: BleepingComputer
TechCrunch first reported on the compromised passcodes being a part of the info set after the publication was contacted by a safety researcher. They’re encrypted, however the researcher indicated that cracking the encryption was pointless to entry the passcode information.
AT&T stated it has now launched an investigation supported by inner and exterior cybersecurity specialists. It’s contacting the entire 7.6 million present clients who’ve been impacted and resetting their passcodes. The previous clients whose private info seems within the information set are additionally being contacted. The corporate will likely be providing credit score monitoring at its expense the place out there.
Masthead: Mike Mozart
