Summary
This document is an advisory that provides situational awareness regarding a data leak involving AT&T customer information. AT&T has confirmed that a dataset containing personal information of approximately 73 million current and former customers has been found for sale on a dark web marketplace. The dataset includes sensitive information such as Social Security numbers, names, email addresses, phone numbers, dates of birth, AT&T account numbers, and passwords. Although AT&T has initiated an investigation, it has not yet determined the source of the data breach. The company states that there is no evidence of unauthorized access to its systems. In response to the breach, AT&T has reset passwords for affected customers and is offering complimentary identity theft and credit monitoring services. The advisory also includes recommendations for organizations to raise awareness of phishing attacks and to implement multi-factor authentication to enhance security.
