Security News > 2023 > March > AT&T blames marketing bods for exposing 9M accounts

AT&T has confirmed that miscreants had access to nine million of its wireless customers' account details after one of its vendor's networks suffered a security failure in January.

Customer Proprietary Network Information from some wireless accounts was exposed, such as the number of lines on an account or wireless rate plan.

The information did not contain credit card information, Social Security Number, account passwords or other sensitive personal information.

The US carrier also recommended customers add "Extra security" password protection to compromised accounts, which comes at no charge.

While The Register has absolutely no proof the two are related, we will note that email marketing firm Mailchimp was also breached in January and said intruders gained access to more than 100 customer accounts.

In a seemingly similar incident last summer, Hold Security said it had discovered stolen data for sale that included names, Social Security numbers, dates of birth, email and physical addresses, and phone numbers belonging to about 23 million Americans that, "Likely belongs to AT&T customers."

News URL

https://go.theregister.com/feed/www.theregister.com/2023/03/09/att_wireless_breach/