AT&T recently reported a significant data breach incident impacting more than 70 million current and former AT&T customers nationwide. According to TechCrunch, three years ago, a threat actor teased an alleged massive theft of AT&T customer data, which included names, home addresses, phone numbers, Social Security numbers, and dates of birth. AT&T said back in 2021 that the leaked data “does not appear to have come from our systems.” Now, AT&T is acknowledging that the stolen data is authentic and belongs to AT&T customers. According to The New York Times, AT&T is currently conducting an investigation but claims it did not know whether the leaked data “originated from AT&T or one of its vendors” and that it “does not have evidence of unauthorized access to its systems resulting in theft of the data set.” A company representative did not address specific questions from The New York Times about how the breach happened or why it went unnoticed for so long.
Labaton is investigating private arbitration claims against AT&T on behalf of current and former AT&T customers who were notified that their personal information was exposed as a result of this breach. California residents, in particular, could be entitled to compensation of up to $750 under state data privacy laws.
