AT&T

The 'Salt Typhoon' hacking campaign compromised AT&T's telecommunications network, allowing unauthorized access to Americans’ phone calls, text messages, and law enforcement wiretap systems. This blatant exploitation of cybersecurity vulnerabilities led to severe consequences, exposing the personal and operational data to potential misuse by nation-state actors. The aftermath of the breach has prompted regulatory proposals to implement basic cyber defenses and enforce cyber risk-management planning to prevent such extensive breaches in the future. This incident highlights the stark need for higher cybersecurity standards within critical infrastructure sectors.

Source: https://www.wired.com/story/the-fccs-jessica-rosenworcel-isnt-leaving-without-a-fight/

TPRM report: https://scoringcyber.rankiteo.com/company/att

"id": "att000011825",
"linkid": "att",
"type": "Breach",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Telecommunications',
                        'name': 'AT&T',
                        'type': 'Telecommunications Company'}],
 'data_breach': {'type_of_data_compromised': ['phone calls',
                                              'text messages',
                                              'law enforcement wiretap '
                                              'systems']},
 'description': "The 'Salt Typhoon' hacking campaign compromised AT&T's "
                'telecommunications network, allowing unauthorized access to '
                'Americans’ phone calls, text messages, and law enforcement '
                'wiretap systems. This blatant exploitation of cybersecurity '
                'vulnerabilities led to severe consequences, exposing the '
                'personal and operational data to potential misuse by '
                'nation-state actors. The aftermath of the breach has prompted '
                'regulatory proposals to implement basic cyber defenses and '
                'enforce cyber risk-management planning to prevent such '
                'extensive breaches in the future. This incident highlights '
                'the stark need for higher cybersecurity standards within '
                'critical infrastructure sectors.',
 'impact': {'data_compromised': ['phone calls',
                                 'text messages',
                                 'law enforcement wiretap systems']},
 'lessons_learned': 'The need for higher cybersecurity standards within '
                    'critical infrastructure sectors.',
 'recommendations': 'Implement basic cyber defenses and enforce cyber '
                    'risk-management planning.',
 'threat_actor': 'Nation-state actors',
 'title': 'Salt Typhoon Hacking Campaign',
 'type': 'Hacking Campaign'}