AT&T customers' text, phone records impacted by data breach

Nearly all AT&T customers’ text, phone records impacted by massive data breach

Source: CFOTO / Getty

AT&T informed federal regulators on Friday that a data breach affected nearly all of its customers after a “threat actor” accessed and copied the company’s call logs.

According to the filing, records of customer call and text interactions that occurred between approximately May 1 and October 31, 2022, as well as on January 2, 2023, were breached using a third-party cloud platform between April 14 and April 25, 2024.

AT&T said it learned of the incident on April 19 but got approval from the Department of Justice to delay notifying the public on two occasions.

The data included records of calls and texts of nearly all of AT&T’s wireless customers and customers of mobile virtual network operators using AT&T’s wireless network, the company said in its filing. The data did not reveal when exactly the phone calls were made, instead, it would show the number of instances users interacted with each other over a period of time.

“These records identify the telephone numbers an AT&T cellular number interacted with during this period. It also included counts of those calls/texts and total call durations for specific days or months,” an AT&T spokesperson said.