AT&T says criminals stole phone records of 'nearly all' customers in data breach • Hacker News Board

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#81

Post by adamtaylor_13 » Fri, Jul 12, 2024, 1:44 PM UTC

smcin wrote: post #8

Ongoing fallout from the Snowflake compromise; AT&T knew on Apr 19 but only disclosed now (Why does this not fall under SOX violation with the obligation to report timely to affected parties? It has affected AT&T's stock price -3% in early trading, so shouldn't it have also required SEC disclosure?) - Records downloaded from Snowflake cloud platform - AT&T will notify 110 million AT&T customers - Compromised data inc…

It definitely included SSNs for some of them.

Source: me. My data was included in the leak and it included my SSN. It’s been a cluster fuck of a cleanup.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#82

Post by chefandy » Fri, Jul 12, 2024, 1:44 PM UTC

Aaronstotle wrote: post #40

John23832 wrote: post #9

How has Snowflake felt ANY recourse for being the source of all of these hacks?

its not Snowflake's fault their customers used weak passwords and no MFA. Not enforcing MFA does merit some blame on Snowflake, however, I still think its on the customer to secure your own environment.

Right. Snowflake facilitated AT&T'S abject negligence, but ultimately the buck stops with AT&T, here.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#83

Post by [deleted] » Fri, Jul 12, 2024, 1:44 PM UTC

Aaronstotle wrote: post #40

John23832 wrote: post #9

How has Snowflake felt ANY recourse for being the source of all of these hacks?

its not Snowflake's fault their customers used weak passwords and no MFA. Not enforcing MFA does merit some blame on Snowflake, however, I still think its on the customer to secure your own environment.

[deleted]

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#84

Post by jader201 » Fri, Jul 12, 2024, 1:44 PM UTC

smcin wrote: post #70

AT&T stock has already bounced back from much of the initial -2.6% drop this morning, so the market thinks AT&T is immune. Meanwhile Snowflake is -3.9% down (they have many other customers than AT&T). https://www.marketwatch.com/investing/stock/T https://www.marketwatch.com/investing/stock/SNOW

I never got the impression that the market ever cares about data breaches. It seems most companies are rarely held financially responsible for data breaches anyway.

I would bet any effects you’re seeing in stocks is unrelated to this news.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#85

Post by zomg » Fri, Jul 12, 2024, 1:45 PM UTC

when will governments hold these companies, but more importantly their executives, criminally liable for their lack of protecting customers' information?

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#86

Post by mdale » Fri, Jul 12, 2024, 1:46 PM UTC

Interesting that they use the word criminals instead of hackers.. makes it sound like it was a physical heist rather than poor security practices on their part :)

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#87

Post by asimpleusecase » Fri, Jul 12, 2024, 1:46 PM UTC

[flagged]

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#88

Post by BenFranklin100 » Fri, Jul 12, 2024, 1:48 PM UTC

This is a political problem. Until we pass laws that companies can be find liable for significant damages in the event of data breaches, we will see little progress on data security. This is an area where Congress needs to act. Current law does not adequately protect the public due to the difficulties in establishing standing, tying specific breaches to specific personal damages, other reasons.

Such a law would seriously impact current practices of the majority of IT firms, including small app developers, which is why we see little push from silicon valley for such changes.

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#89

Post by oriettaxx » Fri, Jul 12, 2024, 1:48 PM UTC

[flagged]

Re: AT&T says criminals stole phone records of 'nearly all' customers in data breach

#90

Post by zer0c00ler » Fri, Jul 12, 2024, 1:49 PM UTC

Aaronstotle wrote: post #40

John23832 wrote: post #9

How has Snowflake felt ANY recourse for being the source of all of these hacks?

its not Snowflake's fault their customers used weak passwords and no MFA. Not enforcing MFA does merit some blame on Snowflake, however, I still think its on the customer to secure your own environment.

[dead]