Find out what we’ve learned, how we’re responding, and how we’re working to keep your personal data safe.
We learned that AT&T customer data was illegally downloaded from our workspace on a third-party cloud platform. We have confirmed the access point has been secured.
Our investigation found that the downloaded data included phone call and text message records of nearly all of AT&T cellular customers from May 1, 2022 to October 31, 2022 as well as on January 2, 2023. These records identify other phone numbers that an AT&T wireless number interacted with during this time, including AT&T landline (home phone) customers. For a subset of the records, one or more cell site ID numbers associated with the interactions are also included.
We continue to work with law enforcement in their efforts to arrest those involved, and we understand that at least one person has been apprehended.
The call and text records identify the phone numbers with which an AT&T number interacted during this period, including AT&T landline (home phone) customers. It also included counts of those calls or texts and total call durations for specific days or months.
We’ll notify current and former customers if their information was involved.
The downloaded data doesn’t include the content of any calls or texts. It doesn’t have the time stamps for the calls or texts.
While the data doesn’t include customer names, there are often ways to find a name associated with a phone number using publicly available online tools.
Protecting your data is one of our top priorities. We have confirmed the affected access point has been secured.
We hold ourselves to a high standard and commit to delivering the experience that you deserve. We constantly evaluate and enhance our security to address changing cybersecurity threats and work to create a secure environment for you. We invest in our network’s security using a broad array of resources including people, capital, and innovative technology advancements.