AT&T Confirms Data Breach Affecting Nearly All Wireless Customers

AT&T confirmed that threat actors breached an AT&T workspace on a third‑party cloud platform (linked to Snowflake) between April 14–25, 2024, exfiltrating call-detail records for nearly all AT&T wireless and MVNO customers—including phone numbers, interaction counts, call durations and some cell site IDs—allowing potential location triangulation and re‑identification; attackers demanded ransom, a payment (~$370,000) was reportedly made, and attribution points to financially motivated actors tied to the Snowflake compromise affecting many customers.