AT&T has announced that certain data-specific fields belonging to the company were found in a dataset released on the dark web approximately two weeks ago. While AT&T has confirmed this finding, it has not yet determined if the data in these fields originated from AT&T itself or one of its vendors. Regarding the remaining data set, which contains personal information like social security numbers, the source is still under evaluation.
In response to this discovery, AT&T has launched a thorough investigation with the support of both internal and external cybersecurity experts. Initial analysis suggests that the data set dates back to 2019 or earlier and affects approximately 7.6 million current AT&T account holders and around 65.4 million former account holders.
At present, AT&T has not found evidence of unauthorized access to its systems leading to the removal of the data set. However, the company is taking proactive measures by communicating with those affected and offering credit monitoring services at its expense where applicable. Customers, both current and former, are encouraged to visit www.att.com/accountsafety for further details and assistance.
Despite this incident, AT&T reports that its operations have not been materially impacted as of the current date.
