According to the AT&T spokesperson, no names, addresses, or Social Security Number of customers have been stolen, just their call logs and phone numbers. “The call and text records identify the phone numbers with which an AT&T number interacted during this period, including AT&T landline (home phone) customers,” tips AT&T, and continues that “it also included counts of those calls or texts and total call durations for specific days or months.”
Still, according to the filing, anyone who has a bit of technical expertise can use available online tools to connect phone numbers with names and addresses.
The customer data that previously leaked and was reported by AT&T in April was from network connections made in 2019, but this current data breach is actually quite a bit fresher, even including some numbers and call logs from as early as last January.
Needless to say, even call log exposure could be enough of a problem for anyone who wouldn’t want the world to know who and when they called, or for how long they talked. This is especially true if those numbers get matched to names and addresses in a preparation for sale on the Dark Web, where the data from the previous AT&T breach ended up.
Our top priority, as always, is our customers. We will provide notice to current and former customers whose information was involved, along with resources to help protect their information. We sincerely regret this incident occurred and remain committed to protecting the information in our care.
AT&T, July ’24
