AT&T Takes Action After Massive Data Leak

In response to the discovery of leaked customer records, AT&T has reset millions of customer account passcodes. The leaked data contains encrypted passcodes, which could potentially access customer accounts. Although AT&T does not suspect unauthorized access resulting in data exfiltration, a robust investigation is underway. This is the first acknowledgment by AT&T that the leaked data belongs to its customers, impacting approximately 7.6 million current and 65.4 million former account holders. The data includes customer names, addresses, phone numbers, dates of birth, and Social Security numbers. Security researcher Sam "Chick3nman" Croley demonstrated that the encrypted passcodes are not sufficiently random, potentially allowing for the deciphering of the account passcode based on surrounding information in the leaked data set. AT&T announced it will contact all affected customers and provide support to ensure their accounts' security.