Hackers leak data of over 43 million AT&T subscribers

telcodad

The exposed information includes full names, dates of birth, phone numbers, email addresses, physical addresses and 43,989,219 Social Security Numbers:

AT&T Faces Massive Data Breach Exposing Personal Information of Over 43 Million Subscribers
By Luke Bouma, Cord Cutters News - June 4, 2025
https://cordcuttersnews.com/att-faces-massive-data-breach-exposing-personal-information-of-over-43-million-subscribers/

In a staggering blow to consumer privacy, telecommunications giant AT&T has reportedly suffered a massive data breach that has compromised the personal information of over 43 million subscribers. According to a detailed report from Hackread.com, the breach, which involves highly sensitive data, was first exposed on a notorious Russian cybercrime forum on May 15, 2025, and re-uploaded on June 3, 2025, before circulating widely among hackers and other illicit forums: https://hackread.com/hackers-leak-86m-att-records-with-decrypted-ssns/

The exposed information includes full names, dates of birth, phone numbers, email addresses, physical addresses, and, most alarmingly, 43,989,219 Social Security Numbers (SSNs). Hackread.com reports that the data, originally encrypted, has been fully decrypted by the threat actors, meaning that SSNs and dates of birth are now circulating in plain text……

SpottedCat

Lock your credit, people.

https://www.usa.gov/credit-freeze

At this point, enough personal data has leaked that I don’t think companies should use name/dob/ssn to authenticate people anymore.

skinnyJM

and AT&T wants me to give them my bank account number for $10/month off my bill…I don’t think so.

I already had to freeze my credit because of the last massive data breach they were responsible for.

SpottedCat

skinnyJM Exactly. Not in a million years.

It’s trivial to reissue a credit or debit card with a new number. Changing bank account numbers is a huge pain and it’s a lot harder to reverse fraudulent transactions.

MarkRH

Sigh.. brilliant. I already froze all my credit due do a data breech with a health care system.

wdunwoody

…does anyone know if this went as far as to affect AT&T e-mail customers, now under yahoo or currently.com?

telcodad

Use AT&T? You Might Be Eligible for a Cut of a $177 Million Breach Settlement
A judge in Texas gives preliminary approval to the deal, which addresses two recent data breaches. If you’re eligible for a payout, you’ll be notified this summer.
By Michael Kan, PC Magazine - June 23, 2025
https://www.pcmag.com/news/att-customers-eligible-for-177-million-dollar-breach-settlement

Current and former AT&T subscribers might soon be eligible for a payout from a $177 million settlement over two recent data breaches at the carrier.

On Friday, a US district judge in Texas gave preliminary approval to the settlement, with the goal of kicking off the process to distribute the funds before a final approval hearing on Dec. 3.: https://business.cch.com/CybersecurityPrivacy/at&tdatabreachorder.pdf

According to court documents, the settlement fund consists of $149 million to address a major data leak in 2019, which allowed cybercriminals to exploit the data for years from both former and existing subscribers. Last March, AT&T finally confirmed the breach, sparking a wave of class-action lawsuits alleging the company had failed to safeguard the data of 51 million users, including their names, Social Security numbers, and dates of birth: https://www.pcmag.com/news/att-resets-millions-of-customer-passcodes-after-theyre-leaked-on-the-dark

The rest of the $28 million is meant to address a second incident involving a hacker breaching AT&T’s account with cloud storage provider Snowflake in April 2024. This enabled the cybercriminal to access call and text records for nearly all customers. Another round of class-action lawsuits followed, alleging corporate neglect. However, AT&T said no customer names were included in the stolen information. Law enforcement also arrested the two alleged hackers involved in the breach. ….