Thursday, February 27, 2025
HomeCyber CrimeAT&T To Face Lawsuit Following Breach Impacting 73 Million Customers

AT&T To Face Lawsuit Following Breach Impacting 73 Million Customers

Published on

SIEM as a Service

Follow Us on Google News

AT&T, a leading American telecommunications company, is facing a wave of lawsuits following a data breach that exposed the sensitive information of 73 million customers

The breach, confirmed by AT&T on March 30, 2024, included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number, and passcode. 

This sensitive data puts millions of individuals at risk of identity theft, fraud, and other financial crimes.

Document
Run Free ThreatScan on Your Mailbox

AI-Powered Protection for Business Email Security

Trustifi’s Advanced threat protection prevents the widest spectrum of sophisticated attacks before they reach a user’s mailbox. Try Trustifi Free Threat Scan with Sophisticated AI-Powered Email Protection .

Details Of The Breach Remain Unclear

While AT&T has acknowledged the breach, details surrounding the incident remain unclear. 

The company has not disclosed how the attackers gained access to its systems or for how long the breach may have been ongoing. 

Cybersecurity researchers assume that the breach might be linked to a similar incident reported in January 2021, which AT&T never officially acknowledged. 

Customers affected by the breach are filing lawsuits against AT&T, alleging negligence and breach of contract. 

The lawsuits claim that AT&T failed to implement adequate security measures to protect customer data, making them vulnerable to the attack. 

Additionally, the lawsuits argue that AT&T violated its contractual obligations to safeguard customer information.

“It has come to our attention that a number of AT&T passcodes have been compromised. We are reaching out to all 7.6M impacted customers and, as a safety precaution, have reset their passwords. 

In addition, we are emailing and mailing letters to individuals with compromised sensitive personal information separately and offering complimentary identity theft and credit monitoring services”, reads the Listener notice.

Is Your Network Under Attack? - Read CISO’s Guide to Avoiding the Next Breach - Download Free Guide

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver...

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group...

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its...

Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications

Recent cybersecurity investigations have uncovered a sophisticated technique employed by threat actors to evade...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Orange Communication Breached – Hackers Allegedly Claim 380,000 Email Records Exposed

Telecommunications provider Orange Communication faces a potential data breach after a threat actor using the pseudonym “Rey”...

US Employee Background Check Firm Hacked, 3 Million Records Exposed

DISA Global Solutions, a Houston-based provider of employee background checks and workplace safety services,...

New Zhong Stealer Malware Exploit Zendesk to Attack Fintech and Cryptocurrency

A newly identified malware, dubbed Zhong Stealer, has emerged as a significant threat to...