Phone, text message records of ‘nearly all’ AT&T customers stolen

AT&T disclosed a significant data exfiltration from a Snowflake workspace affecting nearly all customers, with attackers obtaining phone and text metadata covering May–Oct 2022 and a record from Jan 2, 2023. The dataset includes phone numbers and some cell-site ID numbers but excludes message/call content and key PII; the company discovered the incident in April 2024, said at least one person connected to the breach is under federal custody, and regulators including the FCC and CISA are investigating. The incident aligns with other Snowflake-related breaches attributed to lapses like missing MFA.