AT&T Discloses Customer-Related Dataset Found on the Dark Web

On 2024-03-30, AT&T confirmed that a dataset found on the dark web contains AT&T-specific fields, while stating it is still evaluating whether the data originated from the company or one of its vendors ^[1]. Preliminary analysis indicates the data appears to be from 2019 or earlier, impacting approximately 7.6 million current and 65.4 million former account holders, and cannot be treated as evidence of a new 2024 system intrusion ^[1]. AT&T stated it has no evidence of unauthorized access to its systems resulting in exfiltration of the dataset, has launched an investigation, is contacting affected individuals, and will offer credit monitoring where applicable ^[1].

Industries mainly affected: Telecom

AT&T stated it has no evidence of unauthorized access to its systems resulting in exfiltration of the dataset, has launched an investigation, is contacting affected individuals, and will offer credit monitoring where applicable ^[1].