AT&T's been hacked for months.

[Ahhzz]

"A file containing data including passcodes and social security numbers of AT&T customers has been available on the dark web for weeks. "
AT&T has acknowledged that a data leak making the rounds online contains information from more than 7.6 million current customers and 65 million former customers. Check your account, make sure you're not one of them....

 

[JIWIL]

"a number of passcodes" The hell does that even mean? Just assume the worst I guess.

"AT&T said the information included in the compromised data set varies from person to person. It could include social security numbers, full names, email and mailing addresses, phone numbers, and dates of birth, as well as AT&T account numbers and passcodes."

https://www.npr.org/2024/03/30/1241863710/att-data-breach-dark-web

I've been an ATT customer since forever, yet to receive any word from them. I will assume they have everything though.

 

[Bill_Bright]

There is a running thread on hacks here: (47) Yet another hack/breach | TechPowerUp Forums

 

[ir_cow]

Another reason to use F2A for everything and don't use the same passwords.

 

[ThrashZone]

Hi,
@Ahhzz
Need a news thread

 

[Bill_Bright]

Need a news thread

As noted, there already is one dedicated to these hacks here: (47) Yet another hack/breach | TechPowerUp Forums

You might want to subscribe to it and maybe contribute if you learn of another, since no doubt, this AT&T won't be the last.

 

[ThrashZone]

As noted, there already is one dedicated to these hacks here: (47) Yet another hack/breach | TechPowerUp Forums

You might want to subscribe to it and maybe contribute if you learn of another, since no doubt, this AT&T won't be the last.

Hi,
That is not a public area it is only available to members.

 

[kapone32]

I would assume AT&T has been sending requests to change passwords.

 

[Dragam1337]

Another reason to use F2A for everything and don't use the same passwords.

If you do use F2A, then pw doesn't really matter ?

 

[Bill_Bright]

That is not a public area it is only available to members.

It is not really private either since anyone can register and become a member. You're a member. It does not cost anything to become a member. The intent for that thread is to have one central location to inform TPU members of hacks. I'm okay with that.

 

[ThrashZone]

Hi,
Yeah maybe they should put all news threads in the lounge area

 

[ty_ger]

The title is misleading. The title implies that AT&T's system is actively breached and has been for months. On the other hand, the details available to us is that data was leaked months ago from an unknown source, but the data is old data from 2019 and does not imply that any known breach is currently active.

 

[ir_cow]

If you do use F2A, then pw doesn't really matter ?

Exactly. Don't use phone # as F2A if possible. Spoofing is easy for those who are in the know. Can't get through Google Authenticator or Apple one yet.

 

[Dragam1337]

Exactly. Don't use phone # as F2A if possible. Spoofing is easy for those who are in the know. Can't get through Google Authenticator or Apple one yet.

When you say phone, you mean having text messages sent as verifiers ? Cause surely that's the only thing that can get spoofed.

But yeah, using google authenticator on the phone is the way to go.

 

[ir_cow]

When you say phone, you mean having text messages sent as verifiers ? Cause surely that's the only thing that can get spoofed.

Yes just the phone number / SIM. Unless your phone is compromised in another way.

 

[remixedcat]

ATT also has leaky BGP and I even told my ISP that routes like 60% traffic thru them about it and I've had no responde from them... also they've had tons of BGP origin hijacks as well. So on the IP backbone end they aren't secure!!

 

[Bill_Bright]

Yeah maybe they should put all news threads in the lounge area

Well, I did create that other post here in Networking and Security but it was moved to The Lounge by someone on the staff. So yeah, maybe they should put all news threads there to be consistent.

On this news this morning are reports of scammers already sending out fake AT&T emails telling folks they have been hacked and to "Click here" and fill out all your personal information. Don't do it.

 

[mb194dc]

Exactly. Don't use phone # as F2A if possible. Spoofing is easy for those who are in the know. Can't get through Google Authenticator or Apple one yet.

Also other 2fa auth apps that are secure.

So many attacks these days all over.

 

[freeagent]

It is like electronic warfare right? I am surprised there is no news of these people getting SWATTED lol..

 

[ThrashZone]

It is like electronic warfare right? I am surprised there is no news of these people getting SWATTED lol..

Hi,
I watched and recorded the beekeeper yesterday
Cool movie maybe people called them and done deal hehe

The Beekeeper (2024) ⭐ 6.4 | Action, Thriller

1h 45m | R

www.imdb.com