
Approximately 109 million AT&T customer accounts were affected by the data breach, which took place largely over five months in 2022. The breach impacted customers of AT&T's mobile, mobile virtual network operators using AT&T's wireless network, and its landline customers who interacted with those cellular numbers.

The AT&T data breach was caused by the illegal download of customer data from an AT&T workspace on a third-party cloud platform. The company is currently investigating the incident and working with law enforcement to arrest those involved. At least one person has been apprehended in connection with the breach.

The AT&T data breach exposed call and text message records of nearly all of its cellular customers, including records of customer call and text interactions between May 1 and October 31, 2022, and a very small number of customers' records from January 2, 2023. The compromised data also includes records from customers of mobile virtual network operators using AT&T's wireless network and AT&T landline customers who interacted with these cellular numbers.