AT&T disclosed mass breach affecting 'nearly all' wireless customers - call and text metadata stolen via Snowflake account
Jul 12, 2024On July 12, 2024 AT&T disclosed that hackers had stolen call and text-message metadata for 'nearly all' of its approximately 110 million wireless customers between May 1 and October 31, 2022. The data was exfiltrated from a third-party cloud workspace hosted on Snowflake using stolen customer credentials. AT&T reportedly paid the threat actor approximately $370,000 in Bitcoin to delete the data. The DOJ allowed disclosure to be delayed twice on national-security grounds before the eventual filing.