Account Info For 73 Million Users Found On ‘Dark Web’ After Latest AT&T Data Breach

Reading Time: 2 minutes

TL;DR:

• AT&T has reset account passcodes for 7.6 million current customers after a massive data breach affected 73 million customers.
• The leaked data included sensitive personal information like names, addresses, phone numbers, dates of birth, Social Security numbers, and account passcodes.
• AT&T is investigating the breach, suspecting potential third-party vendor involvement, and will offer credit monitoring services to affected customers.

Over the weekend, AT&T announced an investigation into the massive data breach that has compromised the personal information of over 73 million AT&T customers. The AT&T data breach, which affected both current and former customers, has forced the company to take immediate action by resetting account passcodes for 7.6 million active users.

The Scope of the AT&T Breach

The leaked data, dating back to 2019 and earlier, contains a data set of sensitive personal details, including names, addresses, phone numbers, dates of birth, and the highly coveted Social Security numbers. Alarmingly, the breached data also included account passcodes, leaving customers vulnerable to potential unauthorized access.

AT&T’s Response

Acting swiftly, AT&T initiated a mass reset of account passcodes for its current customers after being alerted by TechCrunch that the leaked data contained encrypted passcodes that could potentially be decrypted. The company acknowledged the severity of the situation and immediately launched a robust investigation, aided by internal and external cybersecurity experts.

The Decryption Dilemma

In a concerning development, a security researcher, Sam “Chick3nman” Croley, revealed that the encrypted passcodes in the leaked data could be decrypted by correlating them with the surrounding personal information contained within the records. This alarming discovery highlighted the potential vulnerability of millions of customer accounts.

Affected AT&T Customers: Past and Present

The breach affected a staggering 73 million accounts – 7.6 million current AT&T customers and a staggering 65.4 million former customers. While the source of the leak remains inconclusive, with AT&T denying evidence of a direct breach of its systems, the company is exploring the possibility of third-party vendor involvement.

Mitigating the Damage

In an effort to mitigate the potential fallout, AT&T has committed to notifying all affected customers, both current and former, and offering complimentary identity theft and credit monitoring services. This proactive measure aims to empower customers to monitor their accounts and take necessary precautions against potential identity theft or financial fraud.

A Wake-Up Call for the Telecom Industry

The AT&T data breach is the latest in a series of high-profile data breach incidents that have plagued the telecommunications industry, underscoring the urgency for stronger data security measures and breach notification regulations. With the telecom sector increasingly becoming a lucrative target for cybercriminals, the need for robust security practices and stringent vendor oversight has never been more pressing.

As the investigation continues, the AT&T data breach serves as a stark reminder of the vulnerabilities that exist within our interconnected digital landscape. It is a call to action for businesses and policymakers alike to prioritize the protection of consumer data, fostering trust and safeguarding the integrity of our digital ecosystems.

Massive #ATTdatabreach exposes 73M customer records. Telecom company resets account passcodes as investigation continues. #datasecurity! #cybersecurity #telecom @ATT Share on X