AT&T confirms data breach and resets millions of customer passcodes

Image: The Verge

AT&T has acknowledged that a information leak making the rounds online contains accusation from much than 7.6 cardinal existent customers and 65 cardinal erstwhile customers. The institution has reset the information passcodes of progressive customers affected, and says that leaked accusation "may person included afloat name, email address, mailing address, telephone number, societal information number, day of birth, AT&T relationship fig and passcode."

AT&T is reaching retired to affected customers via “email oregon letter” to fto them cognize what information was included and what it’s doing for customers successful response.

The company's acknowledgment that the leaked information is existent — the archetypal reports of the leak emerged successful 2021 — lone came after TechCrunch notified AT&T of the vulnerability of its encrypted passcodes connected Monday. The passcodes are typically four-digit numerical PINs utilized for relationship information connected telephone calls with institution enactment oregon in-store verification and a information researcher’s investigation revealed that it was “easy to decipher” the passcodes.

This FAQ says customers tin acceptable up escaped fraud alerts from recognition bureaus Equifax, Experian, and TransUnion. According to AT&T, the information acceptable “appears to beryllium from 2019 oregon earlier and does not incorporate idiosyncratic fiscal accusation oregon telephone history.” The institution says it’s moving with “external cybersecurity experts to analyse the situation,” and that truthful acold it has nary “evidence of authorized access” to its systems.