\n
![](\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2024\/04\/AP24091762906921-e1711963621339.jpg?w=2048\")
<\/p>\n [ad_1]
\n<\/p>\n
In a Saturday announcement addressing the data breach, AT&T said that a dataset found on the \u201cdark web\u201d contains information including some Social Security numbers and passcodes for about 7.6 million current account holders and 65.4 million former account holders.<\/p>\n
Whether the data \u201coriginated from AT&T or one of its vendors\u201d is still unknown, the Dallas-based company noted \u2014 adding that it had launched an investigation into the incident. AT&T has also begun notifying customers whose personal information was compromised.<\/p>\n
Here\u2019s what you need to know.<\/p>\n
Although varying by each customer and account, AT&T says that information involved in this breach included Social Security numbers and passcodes \u2014 which, unlike passwords, are numerical PINS that are typically four digits long.<\/p>\n
Full names, email addresses, mailing address, phone numbers, dates of birth and AT&T account numbers may have also been compromised. The impacted data is from 2019 or earlier and does not appear to include financial information or call history, the company said.<\/p>\n
Consumers impacted by this breach should be receiving an email or letter directly from AT&T about the incident. The email notices began going out on Saturday, an AT&T spokesperson confirmed to The Associated Press.<\/p>\n
Beyond these notifications, AT&T said that it had already reset the passcodes of current users. The company added that it would pay for credit monitoring services where applicable.<\/p>\n
AT&T also said that it \u201claunched a robust investigation\u201d with internal and external cybersecurity experts to investigate the situation further.<\/p>\n
AT&T has seen several data breaches that range in size and impact\u00a0over the years<\/a>.<\/p>\n While the company says the data in this latest breach surfaced on a hacking forum nearly two weeks ago, it closely resembles a similar breach that surfaced in 2021 but which AT&T never acknowledged,\u00a0cybersecurity researcher Troy Hunt<\/a>\u00a0told the AP Saturday.<\/p>\n \u201cIf they assess this and they made the wrong call on it, and we\u2019ve had a course of years pass without them being able to notify impacted customers,\u201d then it\u2019s likely the company will soon face class action lawsuits, said Hunt, founder of an Australia-based website that warns people when their personal information has been exposed.<\/p>\n A spokesperson for AT&T declined to comment further when asked about these similarities Sunday.<\/p>\n Avoiding data breaches entirely can be tricky in our ever-digitized world, but consumers can take some steps to help protect themselves going forward.<\/p>\n The basics include creating hard-to-guess passwords and using\u00a0multifactor authentication<\/a>\u00a0when possible. If you receive a notice about a breach, it\u2019s good idea to change your password and monitor account activity for any suspicious transactions. You\u2019ll also want to visit a company\u2019s official website for reliable contact information \u2014 as scammers sometimes try to take advantage of news like data breaches to gain your trust through look-alike phishing emails or phone calls.<\/p>\n In addition, the Federal Trade Commission\u00a0notes<\/a>\u00a0that nationwide credit bureaus \u2014 such as Equifax, Experian and TransUnion \u2014 offer free credit freezes and fraud alerts that consumers can set up to help protect themselves from identity theft and other malicious activity.<\/p>\n<\/div>\nHow can I protect myself going forward?<\/h2>\n
Subscribe to the Eye on AI newsletter to stay abreast of how AI is shaping the future of business. Sign up<\/a> for free.<\/div>\n