Breach report · Telecom

Database Containing 70 Million AT&T Users' Info To Be Sold On Hacker Forum

A database allegedly holding 70 million AT&T users' names, Social Security numbers and birthdates surfaced for sale on a hacker forum for $200,000.

A large amount of data that allegedly belongs to AT&T has stirred some controversy as it popped up on the dark web this week. The dispute stems from its origins, as AT&T insists that no breach occurred and that the large amount of data is either inauthentic or was obtained from an unnamed third-party source, not from any of AT&T’s systems.

The cybercriminal group ShinyHunters, notorious for data thefts at Microsoft, Mashable and many more high-profile targets, is standing by its claim that the data was taken directly from AT&T.

Samples of the data for sale include AT&T users’ full names, social security numbers, email addresses and dates of birth. Security experts have noted that this type of data could be used for further social engineering attacks on individuals as well as identity theft. The database is set at a starting price of $200,000.

More from the feed

Other incidents we've written up.

Want to know what this would look like for you?

A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.