HackingTelecom & MediaInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDCredentialsHighContained

AT&T INC.

bd_79d7d9a7036db0e9 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 26, 2024

Filed

Apr 15, 2024

To disclose

20 days

Affected

61,130state residents only

Linked

13 filings

Confidence

67%

Full breach record for AT&T INC. →19 incidents on file

AT&T Inc. notified the New Hampshire Attorney General that personal information of 61,130 NH residents was found in a dataset released online on March 17, 2024. AT&T determined on March 26, 2024, that its data was included. No unauthorized access to AT&T systems was found; data likely resulted from stolen credentials. Data included names, SSNs, DOBs, and passcodes from 2019 or earlier. AT&T reset passcodes and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d20 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 20 days

Mar 26, 2024

Discovered

Apr 15, 2024

Filed

This filing is one of 13 about the same incident.View merged incident

A leak claim by everest about this victim predates this filing by 535 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_2c04c4a158e44fd22024-04-10 · +5dVerified
Massachusetts State AGbd_36f4d420cf6fa07e2024-04-10 · +5dVerified
Oregon State AGbd_7534be63ba9185ec2024-04-10 · +5dVerified
South Carolina State AGbd_54dc2a4241a0af372024-04-09 · +6dCandidate

Show 6 more filings ↓up to 88d gap

California State AGbd_962bc7783c26b3452024-04-09 · +6dVerified
Montana State AGbd_9c10bf1a6486d8102024-04-09 · +6dVerified
Vermont State AGbd_ae9a0cefc958af772024-04-09 · +6dVerified
Indiana State AGbd_ff7d944ebd2888c92024-04-09 · +6dVerified
Delaware State AGbd_5109fdbae81c15502024-04-25 · +10dVerified
SEC 8-Kbd_a4373d2af8bc759a2024-07-12 · +88dVerified

Showing first 10 of 12 linked disclosures.

Name: AT&T INC.
norm: at t
Domain: att.com

Name: AT&T INC.
norm: at t
Domain: att.com
Industry: Telecom & Mediallm

Discovered: Mar 26, 2024
Materiality determined: —
Notification sent: Apr 15, 2024
Affected individuals: 61,130state-resident count only
Data types: Identity (basic)Government IDCredentials
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Consumer Protection & Antitrust Bureau
Initial access: valid_credentials

During the incident: Launched a robust investigation supported by internal and external cybersecurity experts
Reset their passcodes
Offering complimentary identity theft and credit monitoring services to the impacted New Hampshire residents provided by Experian
Sending an email to consumers
Sending a notice to impacted New Hampshire residents via U.S. mail
Changes made: Reset their passcodes
Offering complimentary identity theft and credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

South Carolina State AGApr 9 · first

California State AGApr 9 · first

Montana State AGApr 9 · first

Vermont State AGApr 9 · first

Indiana State AGApr 9 · first

Washington State AG+1d

Massachusetts State AG+1d

Oregon State AG+1d

New Hampshire State AG+6d · this page

Delaware State AG+16d

SEC 8-K+94d

Pattern: first filing Apr 9 (SC), last Jul 12 — a 94-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/att-20240415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2024
Raw hash: 275430d170ee0d53d06eeebea730e572d6573246cac5f73a8d82417c689d17a4

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAT&T INC.

Victim entityAT&T INC.

Incidentdiscovered Mar 26, 2024

Stated responseLaunched a robust investigation supported by internal and external cybersecurity experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov