AT&T Suffers Data Breach: 110 Million Call and Text Records Stolen, Location Data Exposed

New York City, New York, USA United States of America
110 million call and text records stolen
AT&T paid hacker $400,000 in bitcoin to delete the stolen data
First incident reported in May 2024
Location data exposed
Telecommunications giant AT&T suffered a data breach
AT&T Suffers Data Breach: 110 Million Call and Text Records Stolen, Location Data Exposed

In a series of data breaches, telecommunications giant AT&T fell victim to hackers who managed to steal call and text records for nearly all of its cellular customers. The exact number of affected accounts is estimated to be around 110 million. While the content of calls and texts was not accessed, the stolen data included some customers' estimated locations.

The first reported incident occurred in May 2024 when AT&T paid a hacker approximately $400,000 to delete the stolen data. The payment was made in bitcoin. The identity of the hacking group responsible for the breach is not yet known, but it is believed that they have also targeted other companies.

The stolen data has raised concerns about privacy and potential misuse by malicious actors. For instance, law enforcement agencies could use this information to track individuals' movements without a warrant. However, there are legal limitations on the use of location data for surveillance purposes. The Supreme Court has ruled that the government generally needs a warrant to obtain historical cell-site location information.

AT&T customers are advised to be cautious and protect themselves from potential scams or identity theft. They should monitor their accounts closely and report any suspicious activity to the company.

This incident serves as a reminder of the importance of cybersecurity in today's digital age. Companies must take proactive measures to secure their customers' data, while individuals must also be vigilant and take steps to protect themselves online.



Confidence

80%

Doubts
  • Are there any other companies that have been targeted by this hacking group?
  • How many people have actually been affected by this breach?
  • Is the stolen data being sold on the dark web?

Sources

92%

  • Unique Points
    • AT&T paid a hacker about $370,000 to delete stolen customer data
    • Negotiations were conducted through intermediary Reddington and ShinyHunters hacking group
    • Payment made on May 17th in bitcoin
  • Accuracy
    • AT&T paid approximately $370,000 for erasing the data
    • AT&T made this payment to the hacker
  • Deception (100%)
    None Found At Time Of Publication
  • Fallacies (100%)
    None Found At Time Of Publication
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (100%)
    None Found At Time Of Publication

82%

  • Unique Points
    • A hacker claimed to have stolen sensitive call and text logs from AT&T Inc.
    • AT&T made this payment to the hacker
  • Accuracy
    • The hacker was paid approximately $400,000 for erasing the data
  • Deception (50%)
    The article is deceptive in that it implies the hacker was paid directly by AT&T for erasing the data. It does not disclose that this could have been an intermediary payment.
    • A hacker who claims to have stolen sensitive call and text logs from AT&T Inc. said they were paid about $400,000 to erase the data trove.
  • Fallacies (100%)
    None Found At Time Of Publication
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (100%)
    None Found At Time Of Publication

78%

  • Unique Points
    • AT&T paid approximately $400,000 for erasing the data (from one of the other articles)
  • Accuracy
    • ]AT&T paid a hacker about $370,000 to delete stolen customer data[
    • ]AT&T paid approximately $400,00 for erasing the data[
  • Deception (30%)
    The article contains selective reporting and sensationalism. The author focuses on the potential negative consequences of the stolen data without providing any context or balance. She also implies that the location data is a 'rough timeline and map of everywhere you go with your smartphone', which could be misleading to readers who may not understand the limitations of this type of data.
    • With information like the numbers you frequently call, a crook could impersonate your boss, brother or bank to get you to hand over money.
    • You can’t know for sure how this stolen AT&T information might be used against you.
    • Another day, another data breach. But this one is nasty.
  • Fallacies (100%)
    None Found At Time Of Publication
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (100%)
    None Found At Time Of Publication

96%

  • Unique Points
    • AT&T paid a hacker approximately $400,000 for erasing the data
    • The hacker was paid in bitcoin
  • Accuracy
    • AT&T paid a hacker about $370,000 to delete stolen customer data
    • The breached data may include ways to find a name associated with a specific telephone number
    • AT&T confirmed a data breach affecting approximately 110 million customer accounts with AT&T mobile service
  • Deception (100%)
    None Found At Time Of Publication
  • Fallacies (100%)
    None Found At Time Of Publication
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (0%)
    None Found At Time Of Publication

95%

  • Unique Points
    • AT&T paid a hacker over $300,000 to delete stolen data and provide proof of deletion.
    • The hacker initially demanded $1 million from AT&T but ultimately agreed to a third of that amount.
  • Accuracy
    No Contradictions at Time Of Publication
  • Deception (100%)
    None Found At Time Of Publication
  • Fallacies (90%)
    The article contains several instances of appeals to authority and inflammatory rhetoric, but no formal or dichotomous fallacies are present. The author cites multiple sources to support her claims, including a security researcher named Reddington and the company TRM Labs. These sources provide evidence for the payment made by AT&T to the hacker and the subsequent deletion of stolen data.
    • ]AT&T paid a member of the hacking team more than $300,000 to delete the data and provided a video demonstrating proof of deletion.[
    • Reddington provided WIRED with proof of the fee payment.
    • The hacker enlisted him to serve as the go-between for their negotiation with AT&T, and Reddington received a fee from AT&T for serving in that capacity.
  • Bias (100%)
    None Found At Time Of Publication
  • Site Conflicts Of Interest (100%)
    None Found At Time Of Publication
  • Author Conflicts Of Interest (100%)
    None Found At Time Of Publication