{"id":50948,"date":"2023-03-10T12:16:00","date_gmt":"2023-03-10T12:16:00","guid":{"rendered":"https:\/\/www.csoonline.com\/article\/3690609\/att-informs-9m-customers-about-data-breach.html#tk.rss_security"},"modified":"2023-03-10T12:16:00","modified_gmt":"2023-03-10T12:16:00","slug":"att-informs-9m-customers-about-data-breach","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/att-informs-9m-customers-about-data-breach\/","title":{"rendered":"AT&T informs 9M customers about data breach"},"content":{"rendered":"
<\/div>\n

AT&T is informing customers about a data breach at a vendor\u2019s system that allowed threat actors to gain access to AT&T\u2019s Customer Proprietary Network Information (CPNI).<\/p>\n

The incident came to light after customers posted<\/a> the email communication from AT&T on community forums to know if it was legitimate or email fraud.<\/p>\n

\u201cWe recently determined that an unauthorized person breached a vendor\u2019s system and gained access to your \u2018Customer Proprietary Network Information\u2019 (CPNI),\u201d AT&T said in the email.<\/p>\n

About nine million customers affected<\/strong><\/h2>\n

Approximately nine million customers\u2019 CPNI was accessed by the threat actors, according to a statement given by the company to Bleeping Computer<\/a>.<\/p>\n

CPNI<\/a> is the information that telecommunication companies in the US acquire about subscribers and includes information on the services they use, the amount paid for the services, and the type of usage. This information is used by third-party communication vendor companies for marketing purposes. Accessing CPNI information typically requires a warrant from a law enforcement agency.<\/p>\n

\u201cIn our industry, CPNI is information related to the telecommunications services you purchase from us, such as the number of lines on your account or the wireless plan to which you are subscribed,\u201d AT&T said in its email to affected customers assuring them that no sensitive personal or financial information such as social security number or credit card information was accessed. <\/p>\n