AT&T has confirmed that a significant data breach has compromised the phone records of nearly all its customers, amounting to around 110 million individuals. The breach, which affects both cellular and landline users, exposed call and text message metadata spanning six months from May 1, 2022, to October 31, 2022, as well as some records from January 2023. The company assured that the content of calls and texts was not accessed, and also mentioned in its disclosure to the SEC that the hack would not negatively affect its operations and financial results.

The breach is linked to a compromise of the cloud data platform Snowflake, where AT&T stored its customer data. This follows a series of similar breaches affecting other companies, such as Ticketmaster and Advance Auto Parts.

A spokesperson for the FBI confirmed that after AT&T contacted the agency to report the incident in April, the FBI and the Department of Justice agreed to delay the public disclosure of the breach, citing potential risks to public safety or national security. At least one person has been apprehended in connection with the breach. AT&T has since taken steps to secure its systems and is working with law enforcement to prevent further incidents.

Why It Matters: AT&T has joined the growing list of victims of the massive Snowflake cyberattack that occurred earlier this year. This data breach underscores the vulnerabilities that major corporations face in protecting customer data, particularly when depending on third-party cloud services. The breach, which exposed the metadata of millions of users, raises significant privacy concerns and highlights the urgent need for stricter cybersecurity measures, especially for businesses handling vast amounts of information, like cellular network service providers such as AT&T.

• Scope of Breach: The breach exposed call and text metadata, including phone numbers, call durations, and interaction records, affecting approximately 110 million AT&T customers and users of other carriers relying on AT&T’s network.

• Source of Breach: The data was stolen from Snowflake, a cloud data platform utilized by AT&T. While the investigation into the Snowflake cyberattack is ongoing, the company has publicly stated that the breach was possible because some customers failed to implement two-factor authentication measures.

• Delayed Notification: The FBI and DOJ delayed public disclosure of the breach twice, citing potential national security risks. AT&T has now notified affected customers and provided resources for protection.

• Company Response: AT&T has enhanced its cybersecurity measures and closed the access point used in the breach. The company asserts that no customer names, Social Security numbers, or call contents were compromised.

Go Deeper -> Nearly All AT&T Cell Customers’ Call and Text Records Exposed in a Massive Breach – CNN

AT&T Says Criminals Stole Phone Records of ‘Nearly All’ Customers in New Data Breach – Tech Crunch

AT&T Says Hackers Stole Records of Nearly All Cellular Customers’ Calls and Texts – NBC News