AT&T security incident history
Hacking, data breaches and other security incidents involving AT&T, with related coverage.
Jobs and Wozniak hacked AT&T with a blue box
Steve Jobs and Steve Wozniak hacked AT&T using a blue box. The specific date, the extent of the damage and AT&T's response have not been confirmed.
Read on Korben ↗China-linked hackers breach US telecoms, target wiretap systems
Impact: Millions of AT&T and Verizon customers affected
Chinese-linked hacking group Salt Typhoon breached US telecoms operators including AT&T, Verizon and Lumen and targeted wiretap systems. Millions of AT&T and Verizon customers were reportedly affected. In December 2024, AT&T and Verizon said their networks were secure following the breach.
Related reports: 8 · last report →AT&T customer billing data leaked from third-party cloud supplier
Impact: Customer billing information
In 2023, customer billing information that AT&T had provided to a third-party supplier was leaked through a breach of that supplier's cloud. In September 2024, AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into the incident and pledged to improve security.
Related reports: 11 · last report →AT&T call and text records for over 100 million customers stolen
100mImpact: Call and text records for over 100 million customers
In July 2024, it emerged that hackers had stolen call and text records for over 100 million people, accounting for nearly all of AT&T's mobile customers. Most FirstNet customers were later confirmed to be among those affected, and customers brought a class action. A former US service member connected to the incident received a prison sentence in 2026.
Related reports: 35 · last report →AT&T Leak of Data on About 73 Million Current and Former Customers
73mImpact: Information on about 73 million current and former customers
Data on about 73 million current and former AT&T customers was leaked on the dark web. AT&T denied in March 2024 that the leaked data came from its own systems, but acknowledged customer harm later that month and reset millions of passcodes. A $177 million settlement covering two data breach cases was later reached, and a court approved it in October 2026.
Related reports: 103 · last report →