AT&T confirmed over the weekend that more than 73 million records of its current and former customers dumped on the dark web in mid-March do indeed describe its subscribers, though it still denies the data came directly from its systems.
AT&T Data Breach Exposed My Phone Number!
The telecom giant said in a press release Saturday that the personal information that appeared on a cybercrime forum as a free download last month was genuine and included information about 7.6 million current AT&T customers as well as 65.4 million former users. The largest data source appears to be from 2019 or earlier based on initial research, AT&T said.
What's frustrating about this whole affair is that AT&T has repeatedly indicated that the leaked information about its subscribers did not come directly from its systems, even if the details are or were correct. So it must have come from somewhere.
"It is not yet known whether the data in these fields originated with AT&T or any of its suppliers," the carrier giant noted in its statement. "At this time, AT&T has no evidence of unauthorized access to its systems resulting in the exfiltration of the data."
