Live data from Hacker News

AT&T says criminals stole phone records of 'nearly all' customers in data breach

techcrunch.com

41–50 of 874 posts

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#41

> AT&T blamed an “illegal download” on a third-party cloud platform WTF does this even mean? The cloud employees downloaded it? If its so sensitive, why wouldn't this be heavily e2e encrypted?

This is related to the snowflake breach. Snowflake is blaming customers for not enabling MFA.

Looks like more than enough blame to go around. Not enabling MFA is pretty egregious by ATT. Snowflake creating a platform where such a high consequence mistake is apparently easy to make, and obviously without sufficient compensating controls to detect or limit impact of such a single point of failure. That's egregious too.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#42

It's interesting when you have these old, large, sprawling bureaucratic organizations and the employees hardly give a sh!t anymore and allow for these large vulnerabilities. It's not a money issue, it's a caring issue I think.

Our economic system is at odds with security because we're trying to "get by" as cheap as possible. That doesn't bode well for protection of users' data.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#43
post #5

This is another consequence of the surveillance state. The same data that can be used to surveil us by the government can be stolen by who-knows-who. We’d all (mostly) be far better off, IMO, if companies didn’t retain such records.

My wet dream would be a dump of all SMS or Meta or iMessage messages for a multiyear period for nearly 90% of users. Only when Normie Norman's private chats to his mistress and other little relationship trust disrupting secrets become uncensorably hosted on the darknet and freely searchable, only then will Normie Norman get a clue and install SimpleX/Briar/Cwtch/any other owner-free decentralized p2p chat.

While I share the sentiment, Normie Norman is not at fault. Meta and other BigCorps are the perpetrators and Norman the Victim.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#44

> In a statement, AT&T said that the stolen data contains phone numbers of both cellular and landline customers, as well as AT&T records of calls and text messages — such as who contacted who by phone or text — during a six-month period between May 1, 2022 and October 31, 2022. AT&T customer? Prepare for phone calls / text messages from your most frequent contacts saying "I got stranded / I'm Officer Blahblahman help…

I guess everyone is going to learn what Snowden was worried about the hard way now. I imagine there's going to be extortion attempts over calls to abortion clinics etc.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#45
post #31
post #24

Earlier quoted context omitted.

Yes.

Aside from a couple non-US friends, I know no one in the US who uses anything other than straight SMS (and Apple iMessage). I'm sure they exist but certainly not in the circle of people I communicate with.

Everyone I know in the US uses either iMessage or Whatsapp. No one I know uses MMS.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#46

> In a statement, AT&T said that the stolen data contains phone numbers of both cellular and landline customers, as well as AT&T records of calls and text messages — such as who contacted who by phone or text — during a six-month period between May 1, 2022 and October 31, 2022. AT&T customer? Prepare for phone calls / text messages from your most frequent contacts saying "I got stranded / I'm Officer Blahblahman help…

I just realized this is going to fvck my call blocking strategy up: now creditors will have a bank of known good numbers to spoof into my whitelist with! :^O

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#47
post #8

Ongoing fallout from the Snowflake compromise; AT&T knew on Apr 19 but only disclosed now (Why does this not fall under SOX violation with the obligation to report timely to affected parties? It has affected AT&T's stock price -3% in early trading, so shouldn't it have also required SEC disclosure?) - Records downloaded from Snowflake cloud platform - AT&T will notify 110 million AT&T customers - Compromised data inc…

[deleted]

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#49
post #31
post #24

Earlier quoted context omitted.

Yes.

Aside from a couple non-US friends, I know no one in the US who uses anything other than straight SMS (and Apple iMessage). I'm sure they exist but certainly not in the circle of people I communicate with.

Everyone I know uses signal. Different people really are different.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#50
post #43

Earlier quoted context omitted.

My wet dream would be a dump of all SMS or Meta or iMessage messages for a multiyear period for nearly 90% of users. Only when Normie Norman's private chats to his mistress and other little relationship trust disrupting secrets become uncensorably hosted on the darknet and freely searchable, only then will Normie Norman get a clue and install SimpleX/Briar/Cwtch/any other owner-free decentralized p2p chat.

While I share the sentiment, Normie Norman is not at fault. Meta and other BigCorps are the perpetrators and Norman the Victim.

True, but you have to admit once you really see Normie Norman you come to understand aristocracy.

At least I do anyway.

Post reply on HN