Skip to content
Hackers Charged in AT&T Data Breach Involving 50 Billion Records

Hackers Charged in AT&T Data Breach Involving 50 Billion Records

First seen 1 Oct 2026, 07:02 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 1, 2026 at 07:03 UTC
  • •Connor Moucka and John Binns indicted for hacking Snowflake and stealing AT&T records.
  • •Approximately 50 billion customer records were compromised, affecting nearly all AT&T customers.
  • •The hackers extorted victims for 36 Bitcoin, totaling around $2.5 million.

The U.S. government has indicted Connor Moucka and John Binns for hacking into Snowflake, a cloud data storage provider, leading to the theft of approximately 50 billion AT&T customer call and text records. The breach, which affected nearly all of AT&T's cellular and landline customers, was discovered on April 19, 2026, after the intrusion occurred on April 14. The hackers reportedly extorted at least three victims, obtaining 36 Bitcoin, worth around $2.5 million at the time. AT&T had previously announced it would notify 110 million customers about the breach. The indictment describes the victims without naming them, but details align with AT&T's disclosures. Moucka was arrested in Canada, while Binns was arrested in Turkey. The breach also impacted other companies using Snowflake, including Ticketmaster and Santander Bank, highlighting a broader issue with data security in cloud services.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-14
Data breach occurred
Hackers accessed Snowflake systems, leading to the theft of AT&T customer records.
Mashable
2026-04-19
AT&T discovers breach
AT&T became aware of the data breach affecting its customers.
TechCrunch
2026-09-30
Hackers indicted
Connor Moucka and John Binns were indicted for their roles in the Snowflake hack.
Mashable
2026-09-30
Breach details revealed
Indictment disclosed the scale of the breach and the extortion amount.
Mashable

More articles in this cluster (3)

Following this threat?

Track AT&T in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 4

Common questions

How many records were stolen?
Approximately 50 billion customer call and text records were stolen from AT&T.
What companies were affected?
The breach primarily affected AT&T, but also impacted Ticketmaster and other companies using Snowflake.
What actions have been taken against the hackers?
Connor Moucka and John Binns have been indicted and arrested in Canada and Turkey, respectively.