AT&T resets account passcodes after millions of customer records leak online

TechCrunch reports that a 73 million–record dataset allegedly tied to AT&T containing PII (names, addresses, phone numbers, dates of birth, SSNs) and encrypted account passcodes was posted online. A researcher found the passcode encryption insufficient—reducing to ~10,000 unique encrypted values corresponding to 4-digit permutations—allowing passcodes to be mapped via surrounding PII; AT&T is resetting passcodes for millions of current customers and investigating the incident.