{"id":297,"date":"2023-03-10T04:54:15","date_gmt":"2023-03-10T10:54:15","guid":{"rendered":"https:\/\/kentprotect.com\/?p=297"},"modified":"2023-03-11T06:37:08","modified_gmt":"2023-03-11T12:37:08","slug":"att-2023-customer-data-breach-affects-9-million","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/03\/10\/att-2023-customer-data-breach-affects-9-million\/","title":{"rendered":"AT&T 2023 customer data breach affects 9 million"},"content":{"rendered":"
<\/div>\n

(Image source: 123RF, 2019)<\/p>\n\n\n\n

One-sentence summary: <\/strong><\/p>\n\n\n\n

AT&T’s marketing vendor was hacked due to an upgrade eligibility exploit, allowing the customer proprietary network information (CPNI) of over 9 million customers to be breached.<\/p>\n\n\n\n

Who was involved?<\/strong><\/p>\n\n\n\n

AT&T, AT&T’s marketing vendor, a threat actor, and 9 million AT&T customers. <\/p>\n\n\n\n

What was the timeline?<\/strong><\/p>\n\n\n\n

January 2023: AT&T’s marketing vendor gets hacked<\/p>\n\n\n\n

March 6, 2023: Customers report getting the breach notice online. <\/p>\n\n\n\n

What occurred?<\/strong><\/p>\n\n\n\n

In January of 2023, a third-party marketing vendor had a vulnerability in their “device upgrade eligibility” integration exploited, allowing the breach of AT&T customers’ CPNI (Customer Proprietary Network Information) for over 9 million customers (Gatlan, 2023). A customer reported the breach notice via AT&T’s Community Forums, subsequently getting media attention and a media response from AT&T (Is This CPNI Email a Phishing Scam? | AT&T Community Forums<\/em>, 2023; Gatlan, 2023). Breached data included: the “number of lines on your account or the wireless plan to which you are subscribed,” “customer first names, wireless account numbers, wireless phone numbers, and email addresses,” and even “rate plan name, past due amount, monthly payment amount, various monthly charges and\/or minutes used” (Is This CPNI Email a Phishing Scam? | AT&T Community Forums<\/em>, 2023; Gatlan, 2023).<\/p>\n\n\n\n

Estimated costs:<\/strong><\/p>\n\n\n\n

TBA or N\/A (see disclaimer)<\/p>\n\n\n\n

Involved laws: <\/strong><\/p>\n\n\n\n

Federal: Communications Act of 1934 (47 U.S.C. \u00a7 151 et seq.); 47 CFR \u00a7 64.2001 et seq<\/em>. <\/p>\n\n\n\n

Root cause: <\/strong><\/p>\n\n\n\n

Third-party marketing vendor with a “vulnerability.”<\/p>\n\n\n\n

Lessons learned: <\/strong><\/p>\n\n\n\n

Telecommunication providers: Potential third-party due diligence, pending more information (see disclaimer).<\/p>\n\n\n\n

Customers: Should opt out<\/a> of CPNI if they desire to prevent future breaches. AT&T has not made this process easy for all users. <\/a><\/p>\n\n\n\n

Sources: <\/strong><\/p>\n\n\n\n

123RF. (2019, April). img-att-logo.jpg<\/em>. secureyourtrademark.com. https:\/\/www.123rf.com\/photo_125169533_st-marys-circa-april-2019-at-t-retail-cell-phone-and-mobility-store-at-t-wrapped-up-its-merger.html?vti=o1rph3wrwq34j6b2uk-1-1<\/p>\n\n\n\n

Gatlan, S. (2023, March 9). AT&amp;T alerts 9 million customers of data breach after vendor hack<\/em>. BleepingComputer. Retrieved March 10, 2023, from https:\/\/www.bleepingcomputer.com\/news\/security\/atandt-alerts-9-million-customers-of-data-breach-after-vendor-hack\/<\/p>\n\n\n\n

Is this CPNI email a phishing scam? | AT&T Community Forums<\/em>. (2023, March 9). AT&T Community Forums. https:\/\/forums.att.com\/conversations\/att-mail-features\/is-this-cpni-email-a-phishing-scam\/64066deaac6ccc24bdf19e05?page=1<\/p>\n\n\n\n

\n