AT&T has disclosed a data breach involving nearly all call and text records from its wireless network covering a period of several months in mid-2022. This includes both AT&T customers and customers of other carriers that use the AT&T network. The records only include phone numbers (from both ends), the number of times contacted, and call duration. The records do not include customer names nor any other personal info. They also do not include the content of texts or calls, nor do they include timestamps. For a subset of the breached data, cell tower IDs are also included, providing rough location data. AT&T does not believe the data is yet publicly available. AT&T first discovered the breach in April, but was asked by the US Department of Justice to delay disclosure. At least one person has been arrested relating to the incident. AT&T will notify affected customers directly.
