AT&T

The Vermont Office of the Attorney General reported a data breach involving AT&T on April 9, 2024. The breach occurred on March 26, 2024, when AT&T customer information was included in a dataset released on the dark web on March 17, 2024. The specific number of affected individuals is unknown, but the compromised information may have included full names, email addresses, mailing addresses, phone numbers, social security numbers, dates of birth, AT&T account numbers, and AT&T passcodes.

Source: https://ago.vermont.gov/document/2024-04-09-att-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/att

"id": "att820072625",
"linkid": "att",
"type": "Breach",
"date": "3/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Telecommunications',
                        'name': 'AT&T',
                        'type': 'Telecommunications Company'}],
 'attack_vector': 'Dark Web Data Release',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['full names',
                                              'email addresses',
                                              'mailing addresses',
                                              'phone numbers',
                                              'social security numbers',
                                              'dates of birth',
                                              'AT&T account numbers',
                                              'AT&T passcodes']},
 'date_detected': '2024-03-26',
 'date_publicly_disclosed': '2024-04-09',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving AT&T on April 9, 2024. The breach occurred '
                'on March 26, 2024, when AT&T customer information was '
                'included in a dataset released on the dark web on March 17, '
                '2024. The specific number of affected individuals is unknown, '
                'but the compromised information may have included full names, '
                'email addresses, mailing addresses, phone numbers, social '
                'security numbers, dates of birth, AT&T account numbers, and '
                'AT&T passcodes.',
 'impact': {'data_compromised': ['full names',
                                 'email addresses',
                                 'mailing addresses',
                                 'phone numbers',
                                 'social security numbers',
                                 'dates of birth',
                                 'AT&T account numbers',
                                 'AT&T passcodes']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'references': [{'date_accessed': '2024-04-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'AT&T Data Breach',
 'type': 'Data Breach'}