Alleged AT&T Customer Database Leak Resurfaces With 70 Million Records

A database advertised as containing data on roughly 70 million AT&T customers resurfaced online, reviving claims first made when a threat actor offered the records for sale in 2021. Reports said the exposed information included names, dates of birth, phone numbers, physical addresses, email addresses, and in many cases Social Security numbers, creating significant identity-theft and fraud risk for affected individuals.

AT&T said the leaked dataset did not come from its systems and reiterated that its internal investigation found no evidence of a direct compromise tied to the material being circulated. Independent analysis of the files, including review by breach researcher Troy Hunt, indicated the data appeared authentic for many individuals and likely originated from an older source, leaving the central dispute unresolved: the records look real, but AT&T maintains they were not exfiltrated from the company’s environment.