Live data from Hacker News

AT&T says criminals stole phone records of 'nearly all' customers in data breach

techcrunch.com

261–270 of 874 posts

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#261
> The company said the hack wouldn’t be material to its operations or negatively impact its financial results.

And this is why consumers will continue to see their information compromised by companies who collect and retain more data than they need and then fail to invest the time and resources to protect it.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#262
"AT&T reveals it has records of cellular customers calls and texts"

These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#263
The data can be used for traffic analysis (number->number call data); "no PII" except it's pretty easy to match a number to a likely user.

I'm an AT&T customer, and in my case I don't have a risk, but I can imagine this info could be very handy for divorce, custody, and corporate IP lawsuits. So worse than it might look to ordinary folks.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#264

"AT&T reveals it has records of cellular customers calls and texts" These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

[deleted]

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#265

"AT&T reveals it has records of cellular customers calls and texts" These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

I believe this practice was followed only in postwar France, and I think even there has long been jettisoned. It's been a while since I got a French phone bill though.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#266

"AT&T reveals it has records of cellular customers calls and texts" These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

AT&T is well known for working with NSA — 33 Thomas St [1]

[1] https://theintercept.com/2016/11/16/the-nsas-spy-hub-in-new-...

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#267
post #266

"AT&T reveals it has records of cellular customers calls and texts" These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

AT&T is well known for working with NSA — 33 Thomas St [1] [1] https://theintercept.com/2016/11/16/the-nsas-spy-hub-in-new-...

That doesn't excuse this. If these records only existed so they could give them to the NSA at a later time, that further illustrates the dangers of accommodating the agency's desire for access to data generated from the U.S. Telecom backbone.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#268

"AT&T reveals it has records of cellular customers calls and texts" These records should have been deleted at the latest at the point where they're no longer relevant for billing. (Which also means that for customers with unlimited calling/texting, there shouldn't be any records in the first place.)

They keep all records for 7 years because the US Federal Government asked them to, not because they legally have to, but same with T-Mobile and Verizon: https://www.vice.com/en/article/m7vqkv/how-fbi-gets-phone-da...

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#270

Earlier quoted context omitted.

As a nobody, I keep wanting a financial product that is a black hole. Money can go in, but cannot come out without significant pain. Seven+ day waiting period, in person visit, physical mail verification, something, anything that means if I do get hacked my accounts are not drained in milliseconds. When I need a legitimate large withdrawal, I can go through the required effort.

You can have a financial manager control your accounts for you and just keep a small checking account, (plus they'll help you grow your balances) but they're not free. Well, they're not free if you want them to be unbiased. Given, what's going to keep them from getting scammed? Maybe what you're looking for is several safe deposit boxes.

I still want my money invested into the economy. I just want Chase/Fidelity/etc to have an understanding that I am never going to withdraw money from these accounts without planning for it. So, “I” should never be authorized to drain the account at a moments notice without extensive approval. Anything to cause friction for would be scammers and only once-a-year (?) pain from me to triply confirm the money can move.
Post reply on HN