Nearly All AT&T Customers Exposed in Massive 2022 Data Breach

July 17, 2024

INCIDENT

July 15, 2024: AT&T says calls and text message records for about 109 million of the phone service provider's customers were exposed in a massive data breach two years ago. Nearly all of AT&T's mobile phone customers' information was exposed over the course of months in 2022.

The company said that in April hackers exfiltrated records of customer call and text interactions from May 1, 2022, to October 31, 2022, as well as on January 2, 2023. The data originated from AT&T’s ‘workspace’ on a third-party cloud platform.

AT&T said it learned about an "illegal download" of data from a third-party cloud platform called Snowflake in April.

The hacker reportedly demanded a $1 million ransom from AT&T, but he ultimately settled for far less. The hacker provided AT&T with a video showing that he had deleted the stolen data

Incident Date

July 16, 2022

Estimated Cost

Ransom paid.

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified