Hackers stole over six months worth of AT&T call and SMS logs

U.S. telecom giant AT&T said it experienced a data security incident that involved malicious actors accessing the company’s call logs for close to six months.

 

In a filing with the US Securities and Exchange Commission, AT&T said that on April 19, it became aware of a data security incident where threat actors accessed and copied AT&T call logs. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“Based on its investigation, AT&T believes that threat actors unlawfully accessed an AT&T workspace on a third-party cloud platform and, between April 14 and April 25, 2024, exfiltrated files containing AT&T records of customer call and text interactions that occurred between approximately May 1 and October 31, 2022, as well as on January 2, 2023,” reads the filing.

 

While AT&T did not name the third party cloud platform, Recorded Future News reported that the affected database was hosted on the Snowflake platform.

 

“The incident was limited to an AT&T workspace on Snowflake’s cloud platform and did not impact AT&T’s network,” a company spokesperson told the media house.

 

AT&T added that the data does not contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information.

 

“Current analysis indicates that the data includes, for these periods of time, records of calls and texts of nearly all of AT&T’s wireless customers and customers of mobile virtual network operators (“MVNO”) using AT&T’s wireless network,” AT&T said.

 

“These records identify the telephone numbers with which an AT&T or MVNO wireless number interacted during these periods, including telephone numbers of AT&T wireline customers and customers of other carriers, counts of those interactions, and aggregate call duration for a day or month,” the company added.