Per Restore Privacy, wireless carrier AT&T has had personal data stolen from some 70 million customer records, albeit the company has stated the data isn’t really from their subscribers. The data includes names, phone numbers, social security numbers, birth dates, and physical addresses.
The hacker, named ShinyHunters, is trying to sell the database for $1 million and is also trying to crack user account PINs. Based on their research, the data appears to be legit, but they haven’t been able to confirm it came from AT&T.
Restore Privacy stated the following:
A well-known threat actor is selling private data that was allegedly collected from 70 million AT&T customers. We analyzed the data and found it to include social security numbers, dates of birth, and other private information. The hacker is asking $1 million for the entire database (direct sell) and has provided RestorePrivacy with exclusive information for this report.
The hackers stated that AT&T would continue its denials: “It doesn’t surprise me. I think they will keep denying until I leak everything.”
The hacker, in turn, has yet to “leak everything” that would nix any chances of selling the database given that all the information would be out in the open.
As always, please be careful with your passwords and personal information and we’ll have additional information as it become available.
Via The Mac Observer and Restore Privacy