AT&T has confirmed that the data set leaked on the dark web about two weeks ago does indeed contain “fields unique to AT&T data.”
The company is contacting affected customers and providing credit monitoring services.
What kind of data was leaked?
According to AT&T, this batch includes data for approximately 7.6 million current AT&T account holders and approximately 65.4 million former account holders, including names, email addresses, mailing addresses, phone numbers, social security numbers, date of birth, AT&T account number, and passcode). (Not all records contain all of these types of data
“To our knowledge, the compromised data appears to date back to 2019 or earlier and does not include personal financial information or call history,” they added, noting that customers cannot access account activity or credit history. He urged them to always pay close attention to the report. case.
data set leaked It was published on a dark web forum two weeks ago and appears to be the same dataset that was sold in 2021.
AT&T said at the time that the data did not come from its own systems, and still maintains there is “no evidence of unauthorized access to its systems that resulted in the data set being compromised” and that it is not yet aware of it. ing. Whether the data in those areas is from his AT&T or from that vendor. ”
What should customers do?
AT&T advised current account holders to reset their passcodes and set up free fraud alerts with Equifax, Experian and TransUnion.
Affected users will be contacted by the company via email or letter, so they should also be on the lookout for phishing emails that appear to be from AT&T.
You can also check to see if your data is included in the data set by entering the email you used to create your AT&T account in “Have I Been Pwned?”