AT&T announced on Saturday it is investigating a data breach involving the personal information of 73 million current and former customers released on the “dark web.”
AT&T has determined that AT&T data-specific fields were contained in a data set released on the dark web. While AT&T has made this determination, it is not yet known whether the data in those fields originated from AT&T or one of its vendors.
The data set, may have included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number and passcode, the company said.
“Our internal teams are working with external cybersecurity experts to analyze the situation. To the best of our knowledge, the compromised data appears to be from 2019 or earlier and does not contain personal financial information or call history,” the company said.
Based on their preliminary analysis, this impacted approximately 7.6 million current AT&T account holders and 65.4 million former account holders, the company said.
“We are reaching out to all 7.6M impacted customers and have reset their passcodes. In addition, we will be communicating with current and former account holders with compromised sensitive personal information,” the company said in a release.
Currently, AT&T does not have evidence of unauthorized access to its systems resulting in theft of the data set.
“We encourage customers to remain vigilant by monitoring account activity and credit reports. You can set up free fraud alerts from nationwide credit bureaus — Equifax, Experian, and TransUnion. You can also request and review your free credit report at any time via Freecreditreport.com,” the company said.
