Overview

• A threat actor combined separate files from the original 2021 breach to directly link Social Security numbers and birth dates to individual AT&T customers
• The leak comprises about 88.3 million entries, with roughly 86 million unique records including names, addresses, phone numbers and an estimated 44 million unencrypted SSNs
• ShinyHunters stole the data in 2021, it resurfaced on cybercrime forums in March 2024, and the latest version has been cleaned up to remove internal metadata
• AT&T confirms this is not a new breach but a repackaged dataset and says it is conducting a full investigation into the dark web sale
• Cybersecurity experts warn that the linked SSNs and birth dates greatly increase the risk of identity theft and financial fraud for affected customers