AT&T hit by alleged 31 million record breach
If verified, the AT&T breach would mark the third major security incident affecting the company’s customers in less than two years.
A hacker has allegedly leaked data from 31 million AT&T customers, raising fresh concerns over the security of one of America’s largest telecom providers. The data, posted on a major dark web forum in late May 2025, is said to contain 3.1GB of customer information in both JSON and CSV formats.
Instead of isolated details, the breach reportedly includes highly sensitive data: full names, dates of birth, tax IDs, physical and email addresses, device and cookie identifiers, phone numbers, and IP addresses.
Cybersecurity firm DarkEye flagged the leak, warning that the structured formats make the data easy for criminals to exploit.
If verified, the breach would mark yet another major incident for AT&T. In March 2024, the company confirmed that personal information from 73 million users had been leaked.
Just months later, a July breach exposed call records and location metadata for nearly 110 million customers, with blame directed at compromised Snowflake cloud accounts.
AT&T has yet to comment on the latest claims. Experts warn that the combination of tax numbers and device data could enable identity theft, financial scams, and advanced phishing attacks.
For a company already under scrutiny for past security lapses, the latest breach could further damage public trust.
Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!