AT&T confirms data breach and resets millions of customer passcodes

AT&T He confessed The online data leak contains information from more than 7.6 million current customers and 65 million former customers. The company has reset security passcodes for affected active customers, and says the leaked information “may have included full name, email address, mailing address, phone number, Social Security number, date of birth, AT&T account number, and passcode.”

AT&T is contacting affected customers via “email or letter” to let them know what data was included and what it is doing to customers in response.

The company's admission that the leaked data is real – the first Reports of leakage It came out in 2021 – and only then TechCrunch AT&T reported the vulnerability of its encrypted passcodes on Monday. Passcodes are typically four-digit numeric PINs used to secure an account during phone calls with company support or in-store verification, and a security researcher's analysis revealed that passcodes are “easy to decipher.”

These are frequently asked questions He says customers can set up free fraud alerts from credit bureaus Equifax, Experian and TransUnion. According to AT&T, the data set “appears to date back to 2019 or earlier and does not contain personal financial information or call history.” The company says it is working with “external cybersecurity experts to analyze the situation,” and that so far it has “no evidence of authorized access” to its systems.