AT&T says hackers stole records of nearly all cellphone customers’ calls and texts

The call and text message logs of all AT&T cellular customers were exposed in a major cybersecurity hack, the company revealed Friday.

The company said in a SEC Filing learned through an internal investigation that in April, hackers “illegally accessed and copied AT&T call records” that were saved on a third-party cloud platform.

The data contains records of calls and text messages between approximately May 1, 2022 and October 31, 2022, and January 2, 2023.

The content of the calls and messages was not compromised and customers’ personal information was not accessed — but the records included phone numbers. The scale of the hack underscores the scale of the cybersecurity challenge facing large companies.

“Although the data does not include customer names, there are often ways, using publicly available online tools, to find the name associated with a specific phone number,” the company said in its SEC filing.

AT&T said it “took additional cybersecurity measures in response to this incident, including closing the illegal access point.” Customers affected by the hack will be contacted, it said.

This is a developing story. Please check back for updates.