Crooks Steal Phone, SMS Records for Nearly All AT&T Customers

AT&T disclosed a major data breach in which cyber intruders accessed an AT&T workspace on a third-party cloud platform (Snowflake) and downloaded call and text metadata for roughly 110 million people, including location-proximate cell tower data; the cloud accounts were protected only by username/password (no MFA). The theft appears linked to widespread compromised Snowflake credentials (sold after being siphoned by information-stealing malware), affected many other large organizations, and prompted federal involvement and a delayed public disclosure.