Skip to content
AT&T Data Breach Exposes Call Logs of 109 Million Customers

AT&T Data Breach Exposes Call Logs of 109 Million Customers

First seen 3 Nov 2026, 08:16 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •AT&T's 2024 breach affected 109 million customers, exposing sensitive call log data.
  • •Call logs can reveal personal relationships and daily routines despite lacking direct identifiers.
  • •Long retention policies for call logs contribute to increased data breach risks.

In April 2024, AT&T experienced a significant data breach that compromised the call logs of 109 million customers. The breach revealed sensitive information such as phone numbers, call durations, and location data from records dating back to May 2022. Although AT&T stated that the logs did not include call content or personal identifiers like Social Security numbers, the metadata can still reveal intimate details about users' lives. The breach was part of a larger trend of telecom data being targeted, with AT&T being one of several companies affected by credential-based thefts. The long retention period for call logs, often up to five years, increases the risk of exposure. This incident raises concerns about how telecommunications companies handle and protect customer data. The breach has not been linked to any specific attack vector or tool in the articles.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2024-04-01
AT&T data breach disclosed
AT&T reported a breach affecting 109 million customers, exposing call logs and metadata.
BleepingComputer
2024-04-01
Bleeping Computer report published
Bleeping Computer detailed the implications of the AT&T breach on customer privacy and data retention.
BleepingComputer

More articles in this cluster (6)

Following this threat?

Track Salt Typhoon and AT&T in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What data was exposed in the breach?
The breach exposed call logs, including phone numbers, call durations, and location data, but not call content or personal identifiers.
How many customers were affected?
The breach affected approximately 109 million AT&T customers.
What are the implications of this breach?
The breach raises concerns about privacy and the risks associated with long-term data retention by telecom providers.