AT&T now says data breach impacted 51 million customers

AT&T is sending data breach notifications to 51 million former and current customers, warning them that their personal data was exposed in a hacking forum. However, the company has still not disclosed how the data was obtained. These data breach notifications are related to the recent leak of a massive amount of AT&T customer data on the Breach hacking forums that was previously being sold for $1 million in 2021. When the AT&T data was first up for sale by the threat actor ShinyHunters in 2021, AT&T told BleepingComputer that the data did not belong to them and that their systems were not breached. Last month, when another threat actor known as 'MajorNelson' leaked the entire dataset on the hacking forum, AT&T once again told BleepingComputer that the data did not originate from them and their systems were not breached. After BleepingComputer confirmed that the data belonged to AT&T and DirectTV accounts and TechCrunch reported AT&T passcodes were in the data dump, AT&T finally confirmed that the data belonged to them. While the data leak contained the data for over 70 million people, AT&T is now saying that it impacted a total of 51,226,382 customers. "The [exposed] information varied by individual and account, but may have included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number and AT&T passcode," reads the notification. "To the best of our knowledge, personal financial information and call history were n...