In a major Cyberattack on AT&T, phone records from nearly all its customers were exposed. 

AT&T disclosed in a regulatory filing that it became aware of the breach in April 2024. However, the Justice Department requested that AT&T delay the public disclosure of the incident in May and June due to "a substantial risk to national security and public safety," according to a department spokesman.

The Singularity is Nearer: Ray Kurzweil Book predicts Humans will merge with Machines - USA Herald

Celebrating a Century of Fingerprints: FBI NGI System - USA Herald

TikTok Tragedy: Judge Orders Mississippi Mom to Shutdown her social media - USA Herald

Attack thru Cloud Platform

The breach involved the downloading of customer data from a third-party cloud platform called Snowflake, which AT&T uses to manage large amounts of data centrally. Snowflake did not immediately respond to requests for comment.

The breach, which did not compromise the content of calls or texts, has raised serious concerns about data privacy and national security.

The broader landscape of cyberattacks has seen similar incidents affecting various sectors in an interconnected world.

"We have taken steps to close off the illegal access point," AT&T said in a statement. The company is collaborating with law enforcement to identify those responsible, and at least one individual has been arrested in connection with the data breach.

Details of Cyberattack on AT&T

The compromised data includes records of calls and texts from over 100 million customers, encompassing both wireless network users and landline customers. 

The affected period spans from May 2022 to October 2022, with additional records from January 2, 2023, impacting fewer customers. 

Although the data does not include the content of communications or personally identifiable information, such as Social Security numbers and passwords, it does list the telephone numbers that interacted with AT&T cellular numbers during the specified periods. This data can potentially be linked to individual names through online searches, heightening privacy concerns.

"AT&T has assured that the data is not publicly available at this time," the company said. They will notify current and former customers whose information was involved in the breach.

BlackCloak Review of Cyberattack on AT&T

Chris Pierson, CEO of cybersecurity firm BlackCloak, emphasized that this incident poses more of a national security threat than a risk to individual consumers. Phone numbers can be traced back to individuals using data broker records, potentially exposing communication networks for people in sensitive national security roles. 

"The most likely beneficiary of this specific data are foreign nation states or foreign actors," Pierson said.

AT&T holds contracts to provide communications services to several federal agencies, including the State Department, Department of Homeland Security, and the Department of Defense. The company did not immediately comment on how federal customers’ phone logs may have been affected by the breach.

The Federal Communications Commission (FCC) announced on social media that it is investigating the breach and coordinating with law enforcement agencies.

Other Attacks on AT&T

This cyberattack is not an isolated incident for AT&T. In March, the company had to reset the passcodes of 7.6 million customers after discovering a breach that affected roughly 70 million past and present customers. That breach, which compromised customer data including Social Security numbers and full names, resulted in the data being released on the dark web.

 Recent cyberattacks have crippled operations or released sensitive data from hospital patients, Ticketmaster customers, and others. 

In some cases, the primary goal of these attacks was not just to steal data but to disrupt services to such an extent that providers were compelled to pay ransoms. For instance, a June cyberattack on a provider of critical software and data services in the auto retailing industry slowed sales and paperwork processing at thousands of auto dealers across the United States and Canada.

Any breach involving phone data, given the extensive connection between online services and phones could have serious consequences. As major companies increasingly outsource data to cloud services operated by third parties, customers face growing exposure to potential data breaches.