AT&T Breach May Also Impact Millions of Boost, Cricket, H2O Customers

AT&T disclosed a significant data breach of a third-party Snowflake cloud workspace in which attackers accessed and exfiltrated call and text metadata—including phone numbers, call volumes/durations, and some cell site IDs—affecting nearly all AT&T wireless customers and certain MVNOs. The intrusion occurred over an 11-day window (mid–April), covered records from May–Oct 2022 and Jan 2, 2023, and raises risks of targeted phishing, identity abuse, and potential location triangulation; DOJ reviewed the case and delayed public disclosure.