The data of nearly all customers of the U.S. telecommunications giant AT&T was downloaded to a third-party platform in a security breach, the company said Friday, as cyberattacks against businesses, schools and health systems continue to spread globally.
The breach, most of which took place over five months in 2022, hit customers of AT&T’s cellular customers, customers of mobile virtual network operators using AT&T’s wireless network, as well as its landline customers who interacted with those cellular numbers.
Approximately 109 million customer accounts were impacted, according to AT&T, which said that it currently doesn’t believe that the data is publicly available.
“The data does not contain the content of calls or texts, personal information such as social security numbers, dates of birth, or other personally identifiable information,” AT&T said Friday.
The compromised data also doesn’t include some information typically seen in usage details, such as the time-stamps of calls or texts, the company said, or customer names. AT&T, however, said that there are often ways using publicly available online tools to find the name associated with a specific telephone number.
Cyber-security experts concurred, saying that such data can be used to trace users.
“While the information that was exposed doesn’t directly have sensitive information, it can be used to piece together events and who may be calling who. This could impact people’s private lives, as private calls and connections could be exposed,” Thomas Richards, principal consultant at Synopsys’s software integrity group, said in an emailed statement.
“The business phone numbers will be easy to identify and private numbers can be matched to names with public record searches.”
Ticketmaster is encouraging customers to take action after another security breach compromised personal information. The company says people who bought tickets between April 2 and May 18 are likely impacted.
Third-party platform identified as Snowflake
An internal investigation determined that compromised data includes AT&T records of calls and texts between May 1, 2022 and Oct. 31, 2022.
AT&T identified the third-party platform as Snowflake and said that the incident was limited to an AT&T workspace on that cloud company’s platform and did not impact its network.
Cyber-security experts say the sheer volume of data held be companies on cloud platforms can create its own perils.
“The AT&T data breach underscores the growing risks associated with the vast amounts of data companies now store on cloud and SaaS platforms,” said Roei Sherman, field chief technology officer at Mitiga, a threat-detection and -investigation company that focuses on cloud technology.
“As organizations increasingly rely on these technologies, the complexity of detecting and investigating breaches has risen sharply.”
AT&T’s investigation is ongoing and it…
Read More: AT&T data breach affected nearly all customers after info downloaded to
