AT&T has initiated an investigation into a recent data leak that has impacted approximately 73 million current and former customers. The telecommunications company disclosed that the leaked data, which includes personal information such as Social Security numbers, surfaced on the dark web around two weeks ago.
AT&T clarified that it is uncertain whether the data originated from their systems or one of their vendors. As of now, there is no evidence of unauthorized access leading to the extraction of the dataset from AT&T's systems.
The leaked data appears to be from 2019 or earlier and does not contain financial details or specifics about call history. AT&T confirmed that around 7.6 million current account holders and 65.4 million former account holders have been affected by the breach.
As a precautionary measure, AT&T is contacting customers and advising them to reset their account passcodes. Additionally, customers are urged to stay vigilant regarding any account changes or credit report updates. AT&T has also announced that it will provide credit monitoring services at no cost where applicable.
The company was made aware of the potential leak approximately two weeks ago after it was initially reported by vx-underground on March 17. Despite previous assurances of no system compromise, AT&T is actively investigating the situation to confirm the source of the leaked data.