AT&T security incident history
Hacking, data breaches and other security incidents involving AT&T, with related coverage.
Jobs and Wozniak hacked AT&T with a blue box
Steve Jobs and Steve Wozniak hacked AT&T using a blue box. The specific date, the extent of the damage and AT&T's response have not been confirmed.
Read on Korben ↗China-linked hackers breach US telecoms, target wiretap systems
Impact: Millions of AT&T and Verizon customers affected
Chinese-linked hacking group Salt Typhoon breached U.S. telecom carriers including AT&T, Verizon and Lumen and targeted wiretap systems. Millions of AT&T and Verizon customers were reportedly affected. In December 2024, AT&T and Verizon said their networks were secure following the breach.
Related reports: 8 · last report →AT&T customer billing data leaked from third-party cloud vendor
Impact: Customer billing information
In 2023, customer billing information that AT&T had provided to a third-party vendor was leaked through a breach of that vendor's cloud. In September 2024, AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into the incident and pledged to improve security.
Related reports: 11 · last report →AT&T call and text records for over 100 million customers stolen
100MImpact: Call and text records for over 100 million customers
In July 2024, it was disclosed that hackers had stolen call and text records for over 100 million people, representing nearly all of AT&T's wireless customers. Most FirstNet customers were subsequently confirmed to be among those affected, and customers filed a class-action lawsuit. A former U.S. service member linked to the incident was sentenced to prison in 2026.
Related reports: 35 · last report →AT&T Leak of Data on About 73 Million Current and Former Customers
73MImpact: Information on about 73 million current and former customers
Data on about 73 million current and former AT&T customers was leaked on the dark web. AT&T denied in March 2024 that the leaked data came from its own systems, but acknowledged customer harm later that month and reset millions of passcodes. A $177 million settlement covering two data breach cases was later reached, and a court approved it in October 2026.
Related reports: 103 · last report →