AT&T says criminals stole phone records of 'nearly all' customers in data breach

Post by collinmanderson » Sat, Jul 13, 2024, 6:10 PM UTC

miki123211 wrote: post #723

pooper wrote: post #719

Earlier quoted context omitted.

In my not so humble opinion, the biggest problem with phone numbers in general is the general ability to spoof any number. Please correct me if I am wrong but stir/shaken is only available on the new stuff and even then there is no good way to track the origin of a phone call. This is beyond ridiculous and clearly leadership is asleep at the wheel. There needs to be a firm timeline -- maybe a year maybe a decade, I d…

> Step zero is actually having a process/protocol where any phone is tamper evident meaning we can tell 100% that this call came from this operator and the operator knows the call came from this user. This basically doesn't work because the mapping between phone numbers, users and operators isn't exactly 1:1:1. Some businesses have a single number that they use as Caller ID on all their calls , despite having one cor…

Post by SoftTalker » Sat, Jul 13, 2024, 6:23 PM UTC

miki123211 wrote: post #723

pooper wrote: post #719

Earlier quoted context omitted.

In my not so humble opinion, the biggest problem with phone numbers in general is the general ability to spoof any number. Please correct me if I am wrong but stir/shaken is only available on the new stuff and even then there is no good way to track the origin of a phone call. This is beyond ridiculous and clearly leadership is asleep at the wheel. There needs to be a firm timeline -- maybe a year maybe a decade, I d…

> Step zero is actually having a process/protocol where any phone is tamper evident meaning we can tell 100% that this call came from this operator and the operator knows the call came from this user. This basically doesn't work because the mapping between phone numbers, users and operators isn't exactly 1:1:1. Some businesses have a single number that they use as Caller ID on all their calls , despite having one cor…

Post by declan_roberts » Sat, Jul 13, 2024, 6:41 PM UTC

voxic11 wrote: post #427

josh-sematic wrote: post #409

Earlier quoted context omitted.

IANAL but this would seem like a “class action” situation.

At&t customers are bound to individual arbitration so there will be no class action lawsuit for this. > Please read this Agreement carefully. It requires you and AT&T to resolve disputes through arbitration on an individual basis rather than jury trials or class actions. https://www.att.com/legal/terms.consumerServiceAgreement.htm...

Post by xyst » Sat, Jul 13, 2024, 7:08 PM UTC

trompetenaccoun wrote: post #575

whyenot wrote: post #416

AT&T has 110 million customers. Let's be optimistic and assume that each customer only has to spend one minute of extra time managing their account due to the break-in. That is more than 209 years of lost time. Laws related to data breaches need to have much sharper teeth. Companies are going to do the bare minimum when it comes to securing data as long as breaches have almost no real consequences. Maybe pierce the c…

It surprises me that there isn't a single comment pointing out that corporations like AT&T don't collect all that data for fun. This actually costs them a lot of money, but they're legally required by the government. While everyone is blaming the company, did you not take a second and contemplate how weird it is that you're fine with the government (and now everyone else es well) getting a record of all your phone ac…

Post by yazzku » Sat, Jul 13, 2024, 7:13 PM UTC

rsingel wrote: post #640

trompetenaccoun wrote: post #575

Earlier quoted context omitted.

It surprises me that there isn't a single comment pointing out that corporations like AT&T don't collect all that data for fun. This actually costs them a lot of money, but they're legally required by the government. While everyone is blaming the company, did you not take a second and contemplate how weird it is that you're fine with the government (and now everyone else es well) getting a record of all your phone ac…

There's no federal law requiring AT&T to hold onto this data. There's possibly a FISA court requirement (too secret to reveal), but AT&T has long been an exceedingly willing part of the gov's spying apparatus. It fed these records and Internet data to the feds without any court order, and only escaped legal troubles when Obama, contrary to his campaign promises, gave AT&T, Verizon and more retroactive immunity