Although AT&T has said that they did not suffer a recent data breach, a well-known threat actor known as ShinyHunters, allegedly claims to be selling a set of data containing the personal information of 70 million AT&T customers.
ShinyHunters began selling the data on a hacking forum with a starting price of $200,000 and incremental offers of $30,000. Although not confirmed yet (and currently denied by AT&T) the database allegedly contains names, addresses, phone numbers, Social Security numbers, and dates of birth.
At the moment not a lot is known about the supposed hack, or how the data was potentially acquired. ShinyHunters, however, is a well-known threat actor with a high-profile history of cyberattacks, so many experts are taking the claims seriously.
ShinyHunters has breached several companies, including Wattpad, Tokopedia, Microsoft’s GitHub account, BigBasket, Nitro PDF, Pixlr, TeeSpring, Promo.com, and Mathway.
The AT&T data breach news comes shortly after a breach confirmed to impact millions of T-Mobile customers.