“Nearly all” AT&T customers had phone records stolen in new data breach disclosure

AT&T disclosed that a threat actor unlawfully accessed and copied call and text logs stored on a third-party cloud workspace, affecting nearly all AT&T cellular customers for specified periods in 2022 and January 2, 2023. The leaked dataset reportedly contains phone numbers, interaction counts and call durations (but not call/text content, timestamps, or sensitive PII), creating significant privacy and phishing risks; AT&T has notified customers and provided guidance on protective steps.