Security News > 2024 > July > Call, text logs for 110M AT&T customers stolen from compromised cloud storage

AT&T has admitted that cyberattackers grabbed a load of its data for the second time this year, and if you think the first haul was big, you haven't seen anything: This latest one includes data on "Nearly all" AT&T wireless customers - and those served by mobile virtual network operators running on AT&T's network.

Some customers could be at risk because "a subset" of records contained in that online storage included one or more cell tower identification numbers, allowing snoops to potentially roughly geolocate a customer whose data was stolen in the attack.

An AT&T spokesperson told The Register call and text records - specifically the details of those interactions, not the content - for just under 110 million customers were snatched from the compromised cloud storage.

The FBI didn't directly answer our questions regarding the arrest, only saying that it had been working with AT&T on the matter since shortly after the incident was discovered in mid-April, and that the lag in public disclosure was permissible due to delay request allowances for reporting potentially materially substantial data thefts.

AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people's location info Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak US govt pays AT&T to let cops search Americans' phone records - 'usually' without a warrant Advance Auto Parts: 2.3M people's data accessed when crims broke into our Snowflake account.

AT&T said in March that records belonging to 73 million current and former customers were published on the dark web, making this latest admission the second massive customer data exposure it has experienced this year, though it is believed the data exposed in March was stolen several years ago.

News URL

https://go.theregister.com/feed/www.theregister.com/2024/07/12/att_110_million_call_text_logs/