Payam Javan: In a recent announcement on Friday, July 12, AT&T disclosed a significant data breach dating back to April, involving the unauthorized download of data from a third-party cloud platform affecting nearly all of its customers. The telecommunications giant swiftly launched an investigation upon discovery, collaborating with cybersecurity experts to assess the breach’s extent and nature. They confirmed that the access point used to obtain the data had been secured and are cooperating with law enforcement, resulting in at least one arrest.

AT&T emphasized its commitment to data security, reassuring customers through a dedicated website that protecting their information is a top priority. The breach compromised records of calls and texts for nearly all AT&T cellular customers, as well as those using AT&T’s network through mobile virtual network operators (MVNOs) and certain landline customers. The exposed data spans from May 1, 2022, to October 31, 2022, with some additional records from January 2, 2023, affecting a small number of customers. While the compromised data includes telephone numbers and cell site identification numbers, AT&T assured that it does not contain the content of calls or texts, nor does it include sensitive personal information like Social Security numbers or dates of birth.

This incident follows a previous breach disclosed in late March, where AT&T reported the leak of information from approximately 73 million current and former account holders. Despite these breaches, AT&T has not identified any material impact on its operations and continues to work with external experts to enhance its cybersecurity measures. They are preparing to notify affected customers and provide resources to safeguard their information, reaffirming their dedication to customer security and service excellence amidst these challenges.