AT&T INC. Incident Report - 2024-03-09

Page last updated on April 1, 2024

A potential incident was reported for AT&T INC. on 2024-03-09.

Material Incident Disclosed?

A Material Cybersecurity Incident 8-K has not been filed.

Incident Report

2024-03-09

Troy Hunt has a write up giving background on the alleged AT&T data breach.

On March 17, Bleeping Computer wrote that AT&T says the data did not originate from its systems.

On March 30, after TechCrunch reached out to AT&T, there has been a mass resetting of passcodes.

On March 31, AT&T acknowledged the data breach:

AT&T has determined that AT&T data-specific fields were contained in a data set released on the dark web approximately two weeks ago. While AT&T has made this determination, it is not yet known whether the data in those fields originated from AT&T or one of its vendors. With respect to the balance of the data set, which includes personal information such as social security numbers, the source of the data is still being assessed.

AT&T has launched a robust investigation supported by internal and external cybersecurity experts. Based on our preliminary analysis, the data set appears to be from 2019 or earlier, impacting approximately 7.6 million current AT&T account holders and approximately 65.4 million former account holders.

Currently, AT&T does not have evidence of unauthorized access to its systems resulting in exfiltration of the data set. The company is communicating proactively with those impacted and will be offering credit monitoring at our expense where applicable. We encourage current and former customers with questions to visit www.att.com/accountsafety for more information.

As of today, this incident has not had a material impact on AT&T’s operations.
Source: Troy Hunt - posted by Andrew Hoog at 2024-04-01 21:15:00 EDT

Company Information