The Sweeping Danger of the AT&T Phone Records Breach

AT&T has disclosed a significant data breach impacting the call and text records of nearly all its customers, affecting around 110 million people. The breach, which occurred between April 14 and 25, 2024, involved attackers exploiting Snowflake cloud accounts to steal massive amounts of metadata, including who contacted whom, call durations, and cell site identification numbers. Although the breach didn't include the content of calls or texts, the stolen data still poses significant privacy risks and could facilitate phishing attacks. The US Cybersecurity and Infrastructure Security Agency has issued an alert, and while law enforcement has made some progress, including apprehending at least one person, the stolen data is already being advertised on cybercrime marketplaces.

Opens on wired