
The AT&T data breach exposed phone numbers of both cellular and landline customers, as well as AT&T records of calls and text messages between May 1, 2022 and October 31, 2022. The stolen logs contain a record of every number AT&T customers called or texted, the number of times they interacted, and the call duration. Additionally, for an undisclosed subset of records, one or more cell site identification numbers linked to the calls and texts were exposed.

AT&T became aware of the illegal download on April 19, 2024. The company immediately hired experts and conducted an investigation, which determined that hackers had unlawfully accessed and copied AT&T call logs between April 14 and April 25.

The breach affected "nearly all" of AT&T's cellular customers, as well as customers of mobile virtual network operators using AT&T's wireless network, and landline customers who interacted with those cellular numbers5. In total, the breach impacted around 110 million AT&T customers.