Nearly all AT&T subscribers’ call records stolen in Snowflake cloud hack

AT&T today said a breach on a third-party cloud platform exposed the call and text records of nearly all its cellular customers. The leaked data is said to include phone numbers that AT&T subscribers communicated with, but not names.

An AT&T spokesperson confirmed to Ars that the data was exposed in the recently reported attack on "AI data cloud" provider Snowflake, which also affected Ticketmaster and many other companies. As previously reported, Snowflake was compromised by a group that obtained login credentials through information-stealing malware.

"In April, AT&T learned that customer data was illegally downloaded from our workspace on a third-party cloud platform," AT&T announced today. AT&T said it is working with law enforcement and "understands that at least one person has been apprehended."