AT&T said Friday that hackers had accessed call and text interactions of nearly all of its customers last spring in a massive hack of the telecom giant.
The company said in an SEC filing it learned in April “that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.” The company immediately activated its incident response process to investigate and retained external cybersecurity experts to assist.
Based on its investigation, it believes that “threat actors” unlawfully accessed an AT&T workspace on a third-party cloud platform and, between April 14 and April 25, 2024, exfiltrated files containing AT&T records of customer call and text interactions that occurred between approximately May 1 and October 31 of 2022, as well as on January 2, 2023.
The data includes, for these periods of time, records of calls and texts of nearly all of AT&T’s wireless customers and customers of mobile virtual network operators (MVNO) using AT&T’s wireless network.
Read more on deadline.com