AT&T faced a significant data breach that exposed sensitive customer information, including names, addresses, and call records, spanning from 2015 to 2023. The breach led to a $177 million settlement, with affected customers eligible for compensation ranging from hundreds to up to $7,500. The exposed data, while not explicitly including financial or highly sensitive personal details like Social Security numbers, still posed substantial privacy risks. Customers were required to file claims via a dedicated settlement website by November 18, 2024, to receive compensation. The breach underscored vulnerabilities in AT&T’s data protection measures, prompting legal action and financial repercussions for the company. The incident highlighted the broader risks of long-term data exposure, even if the immediate financial or operational impact on customers was not explicitly detailed in the report.
Source: https://www.wyff4.com/article/att-data-breach-settlement-claim-cash/68132705
TPRM report: https://www.rankiteo.com/company/att
"id": "att2892228093025",
"linkid": "att",
"type": "Breach",
"date": "6/2015",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Customers between 2015 and 2023 '
'(exact number unspecified)',
'industry': 'Telecommunications',
'location': 'United States',
'name': 'AT&T',
'size': 'Large (Fortune 500)',
'type': 'Telecommunications Company'}],
'customer_advisories': 'Eligible customers (2015–2023) instructed to visit '
'www.telecomdatasettlement.com to submit claims using '
'their settlement claim ID, name, phone number, or '
'account information.',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes (names, '
'addresses)',
'sensitivity_of_data': 'High (includes names, addresses, call '
'records)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Call records']},
'description': 'AT&T is paying out a $177 million settlement after a massive '
'data breach exposed customer names, addresses, and call '
'records. Affected customers (2015–2023) may be eligible for '
'compensation up to $7,500. Claims must be filed by November '
'18 via www.telecomdatasettlement.com.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'breach and settlement',
'data_compromised': ['Customer names', 'Addresses', 'Call records'],
'financial_loss': '$177 million (settlement payout)',
'identity_theft_risk': 'Possible (due to exposed PII)',
'legal_liabilities': '$177 million settlement'},
'investigation_status': 'Settled (compensation phase)',
'references': [{'source': 'Rossen Reports (Good Morning America)',
'url': 'https://www.telecomdatasettlement.com'},
{'source': 'YouTube (Advertisement/Report)'}],
'regulatory_compliance': {'legal_actions': 'Class-action settlement ($177 '
'million)'},
'response': {'communication_strategy': 'Public settlement announcement and '
'claim process via '
'www.telecomdatasettlement.com'},
'stakeholder_advisories': 'Customers advised to file claims by November 18, '
'2024',
'title': 'AT&T Data Breach Settlement (2015–2023)',
'type': 'Data Breach'}