Nearly all AT&T customer data downloaded to 3rd-party platform after security breach

The data of nearly all customers of the telecommunications giant AT&T was downloaded to a third-party platform in a 2022 security breach, the company said Friday, as cyberattacks against businesses, schools and health systems continue to spread globally.

The breach hit customers of AT&T's cellular customers, customers of mobile virtual network operators using AT&T’s wireless network, as well as its landline customers who interacted with those cellular numbers.

AT&T said that it currently doesn’t believe that the data is publicly available.

“The data does not contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information,” AT&T said Friday.

The compromised data also doesn’t include some information typically seen in usage details, such as the time stamp of calls or texts, the company said, or customer names. AT&T, however, said that there are often ways using publicly available online tools to find the name associated with a specific telephone number.

An internal investigation determined that compromised data includes files containing AT&T records of calls and texts between May 1, 2022 and Oct. 31, 2022.

AT&T has more than 100 million customers in the U.S. and almost 2.5 million business accounts.

The company said Friday that it has launched an investigation and engaged with cybersecu...