AT&T INC.
bd_3a02a71ddd82b01f · schema v1 · pii pii-v1
All records for AT&T INC. →23 incidents on fileAccount takeover notice
AT&T INC. notified customers of unauthorized access to their accounts. The filing says: “We have found nothing to suggest that the ID and password combinations were obtained from AT&T; they were likely obtained from another source and/or through malware or phishing (discussed below).”
AT&T notified Montana residents of unauthorized access to online accounts between Jan 25 and Apr 20, 2017. Attackers used stolen credentials, likely obtained via phishing, to view driver's license numbers. AT&T locked accounts and offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 25, 2017
Begins
May 19, 2017
Filed
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- New Hampshire State AGbd_154f5cf05e912da12017-05-19Verified
- Massachusetts State AGbd_96ee6b72561f718c2017-05-19Verified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.