Live data from Hacker News

AT&T says criminals stole phone records of 'nearly all' customers in data breach

techcrunch.com

21–30 of 874 posts

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#22

> AT&T blamed an “illegal download” on a third-party cloud platform WTF does this even mean? The cloud employees downloaded it? If its so sensitive, why wouldn't this be heavily e2e encrypted?

This is related to the snowflake breach. Snowflake is blaming customers for not enabling MFA.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#23

How has Snowflake felt ANY recourse for being the source of all of these hacks?

> Snowflake blamed the data thefts on its customers for not using multi-factor authentication to secure their Snowflake accounts

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#24

And this is yet another reason why I use signal

Do you exclusively use signal? Do your friends also use signal? Do you have friends who only use signal to communucate with you?

Yes.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#26
> In a statement, AT&T said that the stolen data contains phone numbers of both cellular and landline customers, as well as AT&T records of calls and text messages — such as who contacted who by phone or text — during a six-month period between May 1, 2022 and October 31, 2022.

AT&T customer? Prepare for phone calls / text messages from your most frequent contacts saying "I got stranded / I'm Officer Blahblahman helping your friend get home... please send gift card / venmo"

It's only metadata...

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#27
post #5

This is another consequence of the surveillance state. The same data that can be used to surveil us by the government can be stolen by who-knows-who. We’d all (mostly) be far better off, IMO, if companies didn’t retain such records.

Yes but have you ever asked a dev if they actually need the 8 year old logs in some bucket?

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#28
post #5

This is another consequence of the surveillance state. The same data that can be used to surveil us by the government can be stolen by who-knows-who. We’d all (mostly) be far better off, IMO, if companies didn’t retain such records.

My wet dream would be a dump of all SMS or Meta or iMessage messages for a multiyear period for nearly 90% of users. Only when Normie Norman's private chats to his mistress and other little relationship trust disrupting secrets become uncensorably hosted on the darknet and freely searchable, only then will Normie Norman get a clue and install SimpleX/Briar/Cwtch/any other owner-free decentralized p2p chat.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#29
post #8

Ongoing fallout from the Snowflake compromise; AT&T knew on Apr 19 but only disclosed now (Why does this not fall under SOX violation with the obligation to report timely to affected parties? It has affected AT&T's stock price -3% in early trading, so shouldn't it have also required SEC disclosure?) - Records downloaded from Snowflake cloud platform - AT&T will notify 110 million AT&T customers - Compromised data inc…

According to CNN:

“The company said the US Department of Justice Department determined in May and in June that a delay in public disclosure was warranted. It’s not clear why that the US government requested that data be delayed. CNN has reached out to the Justice Department for comment.”

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#30
post #15

This is the kind of breach that really should be company-ending, but will sadly instead likely result in a slap on the wrist. It is high time for the US to have a privacy law with real teeth, and to enforce it with vigour.

Class-action suit sounds reasonable, but sadly those never give penalties in right ballpark. Here it should be hundreds to thousands at least per affected customer.

But my guess it is few tens of cents, if that... While lawyer will get nice couple million pop...

Post reply on HN