Millions of current and former AT&T customers learned over the weekend that hackers have likely stolen their personal information and are sharing it on the dark web.
AT&T on Saturday said it doesn't know if the massive data breach "originated from AT&T or one of its vendors," but that it has "launched a robust investigation" into what caused the incident. The data breach is the latest cyberattack AT&T has experienced since a leak in January of 2023, that affected 9 million users. By contrast, Saturday's much larger breach impacts 73 million current and former AT&T account holders. AT&T has seen several data breaches over the years that range in size and impact.
Until more details of the investigation arise, here's what customers should know about the most recent data breach.
How many people were impacted by the AT&T data breach?
AT&T said the breach on Saturday affects about 7.6 million current and 65.4 million former AT&T customers.
What type of information was taken from AT&T?
AT&T disclosed that a dataset discovered on the dark web includes sensitive information such as Social Security numbers and passcodes. Passcodes, unlike passwords, are typically four-digit numerical PINs. In addition to this, full names, email addresses, mailing addresses, phone numbers, dates of birth, and AT&T account numbers may have been compromised. The data affected dates back to 2019 or earlier and does not seem to involve financial information or call history.
Was my information affected by the AT&T data breach?
Individuals impacted by this breach can expect to receive an email or letter directly from AT&T regarding the incident. The distribution of email notifications commenced on Saturday, as confirmed by an AT&T spokesperson.
What has AT&T done so far to help customers?
Aside from informing customers about the breach, AT&T has already reset the passcodes of current users. The company has also committed to covering the costs of credit-monitoring services where necessary.
What's the best way to protect my personal information?
If you receive a notification about a breach, it is advisable to change your password and closely monitor your account for any suspicious activities. The Federal Trade Commission provides free credit freezes and fraud alerts that consumers can utilize to safeguard themselves against identity theft and other forms of malicious behavior.
— With the Associated Press