
The AT&T hack exposed six months' worth of call and text message records of nearly every AT&T cellular network customer5. The compromised data includes phone numbers, records of calls and texts, and some location-related data, but does not contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information14.

Hackers accessed AT&T's customer data by unlawfully accessing and copying AT&T call logs saved on a third-party cloud platform. The breach occurred in April, and the accessed data includes records of calls and texts between May 1 and Oct5. 31, 2022, and on Jan. 2, 2023. The content of the calls and messages was not compromised, but the records did include phone numbers.

The stolen AT&T records cover a six-month period between May 1, 2022, and October 31, 2022, as well as records from January 2, 2023, for a smaller number of customers24. The data includes phone numbers of both cellular and landline customers, and AT&T records of calls and text messages during this time frame.