HighBreachHave I Been Pwned — public breach catalog· 19 Mar 2024

AT&T — 49.1M accounts

Severity: High · Kind: Data breach

Plain-English summary on the way

We've ingested this item but haven't summarised it yet. Read the upstream advisory using the link below in the meantime — the AI summary will appear here once the next run completes.

From the source

In March 2024, tens of millions of records allegedly breached from AT&T were posted to a popular hacking forum . Dating back to August 2021, the data was originally posted for sale before later being freely released. At the time, AT&T maintained that there had not been a breach of their systems and that the data originated from elsewhere. 12 days later, AT&T acknowledged that data fields specific to them were in the breach and that it was not yet known whether the breach occurred at their end or that of a vendor . AT&T also proceeded to reset customer account passcodes , an indicator that there was sufficient belief passcodes had been compromised. The incident exposed names, email and physical addresses, dates of birth, phone numbers and US social security numbers.

Breach facts

Accounts affected
49,102,176
Verified
Yes
Sensitive
No
Data exposed
Dates of birthEmail addressesGovernment issued IDsNamesPhone numbersPhysical addresses

Was this useful?

00000Sign in to react

Plain-English summaries are AI-generated and reviewed for tone, not technical accuracy. For incident response, always rely on the original source linked above.