How to know if you were affected by the AT&T data breach and what to do next (2024)

The call and text message records of were exposed in a data breach, the company said Friday.

The company said in a filing with the U.S. Securities and Exchange Commission it learned in April that customer data was illegally downloaded from an AT&T workspace on a third-party cloud platform.

The company said it is working with law enforcement to arrest those involved in the incident, and that at least one person has been apprehended.

"We have an ongoing investigation into the AT&T breach and we're coordinating with our law enforcement partners," the Federal Communications Commission said on social media Friday morning.

Here's what else to know about the massive data breach, if you were affected and what to do if you are concerned about possible exposure of sensitive information.

AT&T data breach:Do users need to do anything?

Who was affected by the AT&T breach?

In the SEC filing, AT&T said the threat actors exfiltrated files containing records of customer call and text interactions that occurred approximately between May 1 and October 31, 2022. The company said the compromised data also includes records from January 2, 2023 for a "very small number of customers."

In addition to cellular customers, customers of mobile virtual network operators (MVNOs) using AT&T's wireless network and AT&T landline customers who interacted with these cellular numbers were also affected.

AT&T said it will contact affected customers by text, email or U.S. mail. Customers can also check their accounts online to see if they were affected.

What type of data was exposed?

AT&T said in a news release Friday that "the data does not contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information."

"It also does not include some typical information you see in your usage details, such as the time stamp of calls or texts," the company added.

AT&T also said that while the compromised data also does not include customer names, there are often ways, using publicly available online tools, to find the name associated with a specific telephone number.

"At this time, we do not believe that the data is publicly available," the company said in the news release.

How to know if you were affected by the AT&T data breach and what to do next (1)

AT&T data breach:

What should AT&T customers do?

AT&T said that as a general rule, customers should remain cautious of any phone call or text request asking you for personal, account or credit card details. If you suspect:

  • Suspicious text activity: Do not reply. Forward the text to AT&T so they can assist you. Forwarded messages are free and won't count toward your text plan.
  • You are a target of fraud on your AT&T wireless number: Report it to AT&T's fraud team. If you suspect fraud on another account, call the customer service number on your bill for help.

AT&T also says customers should only open text messages from people you know and trust, and shouldn't reply to a text from an unknown sender with personal details.

What to do if your Social Security number has been exposed

While AT&T says Social Security numbers were not exposed in the data breach, customers who are concerned about being exposed can follow this guidance from the Federal Trade Commission:

  • Take advantage of free credit monitoring, if offered by the company responsible.
  • Get free credit reports and check them for accounts or charges you don't recognize.
  • Place a free credit freeze or fraud alert. A credit freeze makes it harder for someone to open an account in your name. However, it will require a few extra steps to briefly unlock the freeze if you apply for something that requires a credit check. A fraud alert requires businesses to verify your identity before they issues new credit in your name.
  • Continue to monitor your credit reports atannualcreditreport.com, where you can check them weekly for free.

What to do if your credit card number or bank account information is compromised

While AT&T said that "personally identifiable information" wasn't involved with the data breach, if you suspect your banking information has been leaked, the FTC suggests:

  • Contacting your bank to close your account or cancel your credit or debit card and get a new one.
  • Reviewing transactions regularly to check for fraudulent charges.
  • Updating any automatic payments with your new account information.

Contributing: Chad Murphy, USA TODAY Network

Gabe Hauari is a national trending news reporter at USA TODAY. You can follow him on X@GabeHauarior email him at Gdhauari@gannett.com.

How to know if you were affected by the AT&T data breach and what to do next (2024)

FAQs

How to know if you were affected by the AT&T data breach and what to do next? ›

If you are wondering if you were impacted, AT&T said it will provide notice to current and former customers, so you should keep an eye out for that. If you're a customer with questions, you can call AT&T wireless customer service at 1-800-331-0500.

How do I know if I've been affected by a data breach? ›

Check for suspicious logins into your accounts and activate notifications for them if the service you use provides them. Be on the lookout for misleading password retrieval emails and messages and only change your credentials by logging into the account from the official website.

Who is affected by the AT&T breach? ›

The compromised data includes files containing AT&T records of calls and texts of nearly all of AT&T's cellular customers, customers of mobile virtual network operators (MVNOs) using AT&T's wireless network, as well as AT&T's landline customers who interacted with those cellular numbers between May 1, 2022 - October 31 ...

What information was stolen from AT&T? ›

What was stolen and from who? The data breach involved data AT&T was storing on a third party cloud storage company that was left poorly secured. It includes records of calls and texts – including information about who users called and texted, when, and for how long.

What is the first step after a data breach? ›

The first step you should take after a data breach is to determine which servers have been compromised and contain them as quickly as possible to ensure that other servers or devices won't also be infected. Here are a few immediate things you can do to attempt to contain a data breach.

How do I know if I was affected by an AT&T breach? ›

AT&T said it will contact affected customers by text, email or U.S. mail. Customers can also check their accounts online to see if they were affected.

How can I tell if I have been hacked? ›

A hacked phone will show signs of malicious activity. Your contacts may get messages that you didn't send, unexpected apps may pop up on your device, you could spot new logins to your accounts, or even experience a significant decrease in your phone's speed.

Who do I contact if my data has been breached? ›

If you find that someone is using your information to commit fraud, identitytheft.gov can help you report that, too. Find out how to recover from a data breach at identitytheft.gov/databreach.

Who gets affected by data breaches? ›

Breach impacts

Data breaches hurt both individuals and organizations by compromising sensitive information. For the individual who is a victim of stolen data, this can often lead to headaches: changing passwords frequently, enacting credit freezes or identity monitoring, and so on.

What was the AT&T data breach in 2014? ›

The Associated Press reports that the telecom company has experienced several breaches over the years, including one in 2014 where a rogue employee accessed personal data on about 1,600 customers.

Can AT&T look at your messages? ›

FYI: The content of text or video messages isn't visible or accessible to anyone on the account.

Do you still have to pay for stolen phone with AT&T? ›

Before you replace a device

Keep in mind: If you have an installment balance on your lost or stolen device, you still have to pay the remaining balance.

Does AT&T track your history? ›

We automatically collect a variety of information which may include time spent on websites or apps, website and IP addresses and advertising IDs. It also can include links and ads seen, videos watched, search terms entered and items placed in online AT&T shopping carts.

How do you remove yourself from a data breach? ›

  1. Find Out What Was Breached. The first step in responding to a data breach is to figure out exactly what information was exposed. ...
  2. Change Any Exposed Passwords. ...
  3. Switch From Text-Based MFA to an Authentication App. ...
  4. Remove Your Home Address. ...
  5. Freeze Your Credit. ...
  6. Delete Accounts You're Not Using.
Apr 12, 2021

What are 4 damaging after effects of a data breach? ›

Consequences of a Data Breach
  • Reputational damage;
  • Embarrassment or humiliation;
  • Emotional distress;
  • Identity theft or fraud;
  • Financial loss;
  • Loss of employment or business opportunities;
  • Family violence;
  • Other physical harm and intimidation;

What action should you take if you uncover a data breach? ›

A law enforcement report can also provide documentation to help you resolve the fraud. Call the impacted organizations and report the fraud. Call the affected companies and ask for the fraud department. Explain you are the victim of identity theft.

How long after a data breach do you have to report it? ›

Notice must be provided within seven business days after reasonable determination of a breach. Second, for breaches affecting fewer than 500 customers, the timing of notification depends on the risk of harm.

How do you detect a data breach? ›

Breach detection is the process of identifying and responding to unauthorized access of an organization's data. It involves monitoring for signs of data breaches, such as unusual network activity, unauthorized data access attempts, and unexpected database changes.

Has my phone number been in a data breach? ›

How To Check If My Phone Number Is Leaked. Go to ID Protection Data Leak Checker and find out if your phone number appeared in any data leaks.

How can a data breach affect you? ›

Data breaches can affect the brand's reputation and cause the company to lose customers. Breaches can damage and corrupt databases. Data breaches also can have legal and compliance consequences. Data breaches also can significantly impact individuals, causing loss of privacy and, in some cases, identity theft.

Top Articles
Best App Lab Games To Play On Oculus Quest And Quest 2
How To Find And Install App Lab Apps On Oculus Quest - Virtual Uncle
Nfr Daysheet
Kobold Beast Tribe Guide and Rewards
The Potter Enterprise from Coudersport, Pennsylvania
877-668-5260 | 18776685260 - Robocaller Warning!
City Of Spokane Code Enforcement
Katie Boyle Dancer Biography
Bill Devane Obituary
Declan Mining Co Coupon
Jet Ski Rental Conneaut Lake Pa
Zendaya Boob Job
Qhc Learning
Funny Marco Birth Chart
Phoebus uses last-second touchdown to stun Salem for Class 4 football title
Which Sentence is Punctuated Correctly?
Ihub Fnma Message Board
Aliciabibs
Bill Remini Obituary
Bolsa Feels Bad For Sancho's Loss.
Divina Rapsing
10 Best Places to Go and Things to Know for a Trip to the Hickory M...
As families searched, a Texas medical school cut up their loved ones
Infinite Campus Asd20
Kqelwaob
The Creator Showtimes Near Baxter Avenue Theatres
Issue Monday, September 23, 2024
Learn4Good Job Posting
Urban Blight Crossword Clue
NIST Special Publication (SP) 800-37 Rev. 2 (Withdrawn), Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy
Cbs Trade Value Chart Week 10
UPS Drop Off Location Finder
Dumb Money, la recensione: Paul Dano e quel film biografico sul caso GameStop
Matlab Kruskal Wallis
Gabrielle Enright Weight Loss
Bbc Gahuzamiryango Live
Tokyo Spa Memphis Reviews
Pensacola Cars Craigslist
NHL training camps open with Swayman's status with the Bruins among the many questions
T&Cs | Hollywood Bowl
San Bernardino Pick A Part Inventory
2024-09-13 | Iveda Solutions, Inc. Announces Reverse Stock Split to be Effective September 17, 2024; Publicly Traded Warrant Adjustment | NDAQ:IVDA | Press Release
Natasha Tosini Bikini
Login
Iupui Course Search
N33.Ultipro
The Jazz Scene: Queen Clarinet: Interview with Doreen Ketchens – International Clarinet Association
Amourdelavie
Electronics coupons, offers & promotions | The Los Angeles Times
Predator revo radial owners
Leslie's Pool Supply Redding California
Guidance | GreenStar™ 3 2630 Display
Latest Posts
Article information

Author: Greg O'Connell

Last Updated:

Views: 6229

Rating: 4.1 / 5 (62 voted)

Reviews: 85% of readers found this page helpful

Author information

Name: Greg O'Connell

Birthday: 1992-01-10

Address: Suite 517 2436 Jefferey Pass, Shanitaside, UT 27519

Phone: +2614651609714

Job: Education Developer

Hobby: Cooking, Gambling, Pottery, Shooting, Baseball, Singing, Snowboarding

Introduction: My name is Greg O'Connell, I am a delightful, colorful, talented, kind, lively, modern, tender person who loves writing and wants to share my knowledge and understanding with you.