Are You an AT&T Customer? Here’s What to Know About the Data Breach

Nearly all customers of the telecommunications company AT&T were affected by a cyberattack that exposed phone records of calls and texts from May 2022 through October 2022, and on Jan. 2, 2023, the company said Friday.

Although the company said the breach did not expose the contents of calls or texts or information such as Social Security numbers, passwords or other personally identifiable information, the information that was exposed can still threaten customers’ security.

If you are an AT&T customer, here is what you need to know about the breach.

How do I know if my records were exposed?

AT&T will contact you by text, email or U.S. mail if your account was affected by the cyberattack, the company said.

But AT&T also said that “nearly all” customers had been affected by the breach. So if you were a customer from May 1, 2022, to Oct. 31, 2022, or on Jan. 2, 2023, your phone logs were most likely exposed.

What was exposed?

The phone numbers that you texted and called, as well as how frequently you interacted with them, were exposed by the breach, the company said.

Customers’ personal details, such as Social Security numbers and dates of birth, were not exposed. Nor were the contents of the calls and texts. Although customers’ names were not exposed by the breach, “there are often ways to find a name associated with a phone number using publicly available online tools,” AT&T said.