Threat actors leaked 70M+ records allegedly stolen from AT&T

Vx-underground researchers reported that over 70 million records from an unspecified division of AT&T were leaked on the Breached forum. The legitimacy of the data, stolen in 2021 but only leaked online in 2024, has been confirmed, although it remains uncertain whether this data was obtained directly from AT&T or through a third-party compromise. The disclosed data, claimed by the seller "MajorNelson" to have been obtained by "ShinyHunters," includes sensitive customer information such as names, phone numbers, and social security numbers. AT&T has denied any breach of their systems, and the exact source of the leaked data is still under investigation.

Opens on Security Affairs