AT&T revealed on Friday that hackers accessed call and text records of almost all its cellular customers between May 1, 2022, and October 31, 2022.
The compromised data does not include call or text content, Social Security numbers, birth dates, or other personal details.
A smaller breach affecting records from January 2, 2023, also occurred.
The company discovered the breach in April and is cooperating with law enforcement, leading to at least one arrest.
AT&T assured that the data isn’t believed to be publicly available.
This incident is distinct from an earlier breach affecting millions of customers’ personal information, which was shared on the dark web.
AT&T plans to notify affected customers and advises vigilance against phishing and smishing attempts.