AT&T customer billing data leaked from third-party cloud supplier
In 2023, customer billing information that AT&T had provided to a third-party supplier was leaked through a breach of that supplier's cloud. In September 2024, AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into the incident and pledged to improve security.
Key facts
- Affected organisation
- AT&T
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer billing information
- Cause / method
- Breach of the cloud of a third-party supplier that received customer information
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into a 2023 third-party supplier data breach.
- AT&T pledged to improve security in connection with the data breach.
11 related reports
- LVHN to pay $65 million over data breach that led to cancer patient photos being posted online
- AT&T to pay $13 million over 2023 customer data breach
- AT&T to pay $13 million to settle FCC probe over cloud data breach
- AT&T to pay $13 million FCC settlement for 2023 data breach
- AT&T to pay $13 million over 2023 vendor data breach
- AT&T agrees to $13 million fine for third-party cloud breach
- AT&T fined $13M for data breach after giving customer bill info to vendor
- AT&T settles a 2023 data breach for $13M. Recent incidents are much worse.
- AT&T to pay millions over 2023 data breach
- AT&T Slapped With $13M Fine Over Data Breach, Vows to Improve Security
- Cybersecurity and the cloud: Lessons from FCC cloud breach enforcement
Other incidents at AT&T
Jobs and Wozniak hacked AT&T with a blue box
Steve Jobs and Steve Wozniak hacked AT&T using a blue box. The specific date, the extent of the damage and AT&T's response have not been confirmed.
Read on Korben ↗China-linked hackers breach US telecoms, target wiretap systems
Impact: Millions of AT&T and Verizon customers affected
Chinese-linked hacking group Salt Typhoon breached US telecoms operators including AT&T, Verizon and Lumen and targeted wiretap systems. Millions of AT&T and Verizon customers were reportedly affected. In December 2024, AT&T and Verizon said their networks were secure following the breach.
Related reports: 8 · last report →AT&T call and text records for over 100 million customers stolen
100mImpact: Call and text records for over 100 million customers
In July 2024, it emerged that hackers had stolen call and text records for over 100 million people, accounting for nearly all of AT&T's mobile customers. Most FirstNet customers were later confirmed to be among those affected, and customers brought a class action. A former US service member connected to the incident received a prison sentence in 2026.
Related reports: 35 · last report →AT&T Leak of Data on About 73 Million Current and Former Customers
73mImpact: Information on about 73 million current and former customers
Data on about 73 million current and former AT&T customers was leaked on the dark web. AT&T denied in March 2024 that the leaked data came from its own systems, but acknowledged customer harm later that month and reset millions of passcodes. A $177 million settlement covering two data breach cases was later reached, and a court approved it in October 2026.
Related reports: 103 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.