If you’re an AT&T customer, it’s crucial to take immediate action regarding your personal information. Your AT&T account details may currently be compromised and available on underground hacking forums.
Your AT&T Information Could Be Compromised—Again
Recent reports from cybersecurity researchers at Hackread indicate that hackers have been selling a vast database containing customer records stolen from AT&T. This breach, which occurred in 2024, has led to a database of around 86 million records being posted for sale on a Russian cybercrime forum. Initially shared on May 15 and again on June 3, the database has since started surfacing on other forums.
While Hackread asserts that the total number of disclosed records is 86 million, other posts indicate a number closer to 70 million. Regardless of the exact figure, the primary concern lies in the sensitivity of the compromised data.
Hackread has meticulously analyzed the leaked information, revealing that the dataset includes:
- Full names
- Birthdates
- Phone numbers
- Email addresses
- Physical addresses
- Social Security numbers (a staggering 43,989,219 in total)
In a troubling development, the birth dates and Social Security numbers previously secured by encryption have been decrypted. This means if you’re an AT&T customer, personal details such as your name, address, birth date, phone number, and Social Security number may now be exposed.
This isn’t the first instance of a breach affecting AT&T. A previous incident in July 2024 compromised data for a large portion of its cellular user base, although the company believed the stolen information was not available online. Another breach in March 2024 included data from both current and former customers, affecting 7.6 million active accounts and an additional 65.4 million past customers.
The latest database appears to have compiled information over time from various breaches, including the notable August 2024 incident, which exposed over 3.2 billion Social Security numbers and additional sensitive data. It’s unclear which breach resulted in the data currently for sale, as AT&T has yet to provide confirmation.
According to Hackread, the leaked data is “well-structured and clearly formatted,” divided into three CSV files that make it straightforward for malicious actors to access the information. The meticulous decryption and organization of Social Security numbers indicate that significant effort has gone into the assembly of this database, suggesting it may not have been extracted directly from AT&T’s systems but rather compiled from multiple sources.
Ways to Protect Yourself Against Data Breaches
To mitigate the risks associated with this latest breach, it’s essential to take proactive measures. Start by updating your AT&T account password and activating multi-factor authentication if you haven’t done so already. Regularly monitoring your credit for any signs of fraudulent activity is crucial during this period.
Additionally, consider placing a temporary freeze on your credit to add an extra layer of security if your data has been compromised. Being vigilant about phishing scams or other fraudulent attempts is equally important, as the leaked information can be exploited for identity theft. Your personal data not only puts you at risk but also extends the potential for harm to your friends and colleagues.