AT&T: AT&T breach data resurfaces with new risks for customers

AT&T Customer Data Resurfaces in Massive Compilation, Heightening Identity Theft Risks

A newly disclosed dataset linked to AT&T contains a staggering 176 million records, exposing sensitive customer information that significantly amplifies the threat of identity theft and fraud. The data, privately circulated since February 2, 2026, appears to be a compilation of records gathered over time, rather than the result of a single breach.

The dataset includes highly detailed profiles, with:

• 148 million Social Security numbers (full and partial)
• 133 million full names and street addresses
• 132 million phone numbers
• 75 million dates of birth
• 131 million email addresses

Unlike fragmented leaks, this collection provides cybercriminals with a comprehensive toolkit for targeted attacks. The combination of personally identifiable information (PII) enables sophisticated phishing campaigns, SIM-swap fraud, and account takeovers, as attackers can impersonate victims with precise details. Financial institutions and mobile carriers often rely on this exact data for identity verification, making the dataset particularly dangerous.

The incident underscores how breach data evolves over time aggregated, refined, and repurposed for criminal use. While the exact origin of the records remains unclear, the breadth and depth of the information make it a prime resource for long-term fraud, including credit fraud and tax return scams.

AT&T customers, past or present, are advised to remain vigilant against suspicious communications and monitor financial accounts for unauthorized activity. The dataset’s circulation highlights the persistent risks of historical breaches, where old data resurfaces with renewed potency.

Source: https://www.malwarebytes.com/blog/news/2026/02/att-breach-data-resurfaces-with-new-risks-for-customers

AT&T cybersecurity rating report: https://www.rankiteo.com/company/att

"id": "ATT1770123242",
"linkid": "att",
"type": "Breach",
"date": "2/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '176 million (past or present '
                                              'customers)',
                        'industry': 'Telecommunications',
                        'name': 'AT&T',
                        'type': 'Corporation'}],
 'customer_advisories': 'AT&T customers, past or present, are advised to '
                        'remain vigilant against suspicious communications and '
                        'monitor financial accounts for unauthorized activity.',
 'data_breach': {'number_of_records_exposed': '176 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers (full '
                                              'and partial)',
                                              'Full names and street addresses',
                                              'Phone numbers',
                                              'Dates of birth',
                                              'Email addresses']},
 'description': 'A newly disclosed dataset linked to AT&T contains a '
                'staggering 176 million records, exposing sensitive customer '
                'information that significantly amplifies the threat of '
                'identity theft and fraud. The data, privately circulated '
                'since February 2, 2026, appears to be a compilation of '
                'records gathered over time, rather than the result of a '
                'single breach. The dataset includes highly detailed profiles, '
                'enabling sophisticated phishing campaigns, SIM-swap fraud, '
                'and account takeovers.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': '176 million records',
            'identity_theft_risk': 'High'},
 'lessons_learned': 'The incident underscores how breach data evolves over '
                    'time—aggregated, refined, and repurposed for criminal '
                    'use. Historical breaches can resurface with renewed '
                    'potency, posing long-term risks like credit fraud and tax '
                    'return scams.',
 'motivation': 'Financial Gain (Identity Theft/Fraud)',
 'post_incident_analysis': {'root_causes': 'Compilation of records gathered '
                                           'over time (origin unclear)'},
 'recommendations': 'AT&T customers, past or present, are advised to remain '
                    'vigilant against suspicious communications and monitor '
                    'financial accounts for unauthorized activity.',
 'response': {'communication_strategy': 'Customer advisories issued'},
 'title': 'AT&T Customer Data Resurfaces in Massive Compilation, Heightening '
          'Identity Theft Risks',
 'type': 'Data Compilation/Leak'}