AT&T is investigating a data breach that could potentially impact 73 million current and former customers. Social security numbers may be included.
AT&T has determined that AT&T data-specific fields were contained in a data set released on the dark web approximately two weeks ago. While AT&T has made this determination, whether the data in those fields originated from AT&T or one of its vendors is unknown. Concerning the balance of the data set, which includes personal information such as social security numbers, the source of the data is still being assessed.
AT&T has launched a robust investigation supported by internal and external cybersecurity experts. Based on our preliminary analysis, the data set appears to be from 2019 or earlier, impacting approximately 7.6 million current AT&T account holders and approximately 65.4 million former account holders.
Also Read: Demystifying Cyber Security: Essential Concepts and Strategies
Currently, AT&T does not have evidence of unauthorized access to its systems, which results in the exfiltration of the data set. The company is communicating proactively with those impacted and will offer credit monitoring at our expense where applicable. We encourage current and former customers with questions to visit www.att.com/accountsafety for more information.
As of today, this incident has not had a material impact on AT&T’s operations.
