Call, text logs for 110M AT&T customers stolen from compromised cloud storage

AT&T disclosed that a breach of a third-party Snowflake cloud account led to theft of call and text metadata for nearly 110 million wireless customers (including MVNOs); some records contained cell‑tower IDs enabling approximate geolocation. The intrusion appears linked to credential stuffing and info‑stealer malware used to obtain valid logins as part of a wider campaign against Snowflake customers, and at least one arrest has been reported.