AT&T has data from 70 million customers stolen and offered for sale at a price of $1 million
User data stolen from AT&T and is being offered for sale
The $1 million selling price along with other information related to the hack was posted Thursday on an underground hacking forum. The post, according to RestorePrivacy, included a small sample of the data stolen by the hacker and “it appears to be authentic based on available public records,” according to the privacy resource center. While RestorePrivacy can’t confirm that the information in the database belongs to AT&T customers, everything it examined appears to be valid, it said.
- Phone number
- Physical address
- Email address
- Social security number
- Date of birth
If this news is legit, U.S. AT&T customers face identity theft, phishing scams, social engineering attacks, hacked accounts, and social security scams. As a result, AT&T subscribers need to confirm any email they receive that looks genuine but requests their bank account number, social security number, credit card number, or more.
AT&T denies that it has been hit by a data breach
AT&T released a statement that says, “Based on our investigation today, the information that appeared in an internet chat room does not appear to have come from our systems.” The hacker also issued something of a statement which said, “By the way, if AT&T is afraid and want their database taken off the market, they can contact me for an agreement, it has been done recently and both sides were satisfied.”
The hacker also believes that one of the encrypted strings of data he took is a list of users’ PIN numbers which makes this data breach potentially a major worry for those whose data was stolen.
In 2015, an AT&T data breach exposed the names and social security numbers belonging to 280,000 U.S. customers. As a result, the wireless provider was forced to pay a $25 million fine to the Federal Communications Commission (FCC). AT&T employees in Mexico, Colombia, and the Philippines were reportedly behind the hack. Besides the fine, AT&T was told to inform customers affected by the data breach and to pay for credit monitoring services for impacted customers in Colombia and the Philippines.