AT&T Security Breach Impacts Millions: 2022 Data Compromise

Washington, Jul 12 (AP) A security breach in 2022 compromised the data of nearly all of AT and T's cellular customers, customers of mobile virtual network operators using AT and T's wireless network, as well landline customers who interacted with those cellular numbers.

So far it has found that the compromised data includes files containing AT and T records of calls and texts between May 1, 2022 and October 31, 2022.

The company said on Friday that it has launched an investigation and engaged cybersecurity experts to understand the nature and scope of the criminal activity.

The company said that the compromised data also includes records from January 2, 2023, for a very small number of customers. The records identify the telephone numbers an AT and T or MVNO cellular number interacted with during these periods. For a subset of records, one or more cell site identification number(s) associated with the interactions are also included.

AT and T said the data doesn't contain the content of calls or texts, personal information such as Social Security numbers, birth dates, or other personally identifiable information. It also doesn't include some information typically seen in usage details, such as the time stamp of calls or texts. The data doesn't include customer names, but the company said that there are often ways, using publicly available online tools, to find the name associated with a specific telephone number.

AT and T said it is working with law enforcement on the incident and that it understands that at least one person has been apprehended so far.