AT&T has disclosed a massive data breach affecting 70 million current and former customers, with stolen data including Social Security numbers, account PINs, and billing addresses appearing on dark web forums.

Scope of Breach

The breach occurred through a compromised third-party vendor system and went undetected for 3 months. Stolen data includes names, SSNs, dates of birth, phone numbers, and encrypted account passwords.

Response

AT&T is offering 2 years of free credit monitoring and has reset all account PINs. The FCC has opened an investigation and may impose fines exceeding $100 million.