The Sweeping Danger of the AT&T Phone Records Breach

AT&T disclosed a major data breach affecting about 110 million customers after attackers accessed a Snowflake data warehouse and stole call and text metadata — including phone numbers, interlocutors, call durations, aggregate tallies, and some cell-site IDs — covering mostly May–October 2022 and some January 2023 records; content of communications and timestamps were reportedly not included. The compromise was discovered on April 19 with exfiltration occurring April 14–25, disclosure was delayed for law enforcement investigations, and at least one suspect has been apprehended. The incident is tied to a broader series of Snowflake account compromises that affected many organizations.