UnknownTelecom & MediaInformationCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial credentialsMediumContained

AT&T INC.

bd_962bc7783c26b345 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 26, 2024

Filed

Apr 9, 2024

To disclose

14 days

Affected

Not disclosed

Linked

12 filings

Confidence

62%

Full breach record for AT&T INC. →23 incidents on file

AT&T Inc. notified customers that their personal information was compromised after appearing in a dataset released on the dark web on March 17, 2024. AT&T determined customer data was included on March 26, 2024. Affected data may include name, email, address, phone, SSN, DOB, account number, and passcode. Data dates from June 2019 or earlier. AT&T reset passcodes and offered credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 26, 2024 → Notified Apr 1, 20246d ✓ CA 60-day OK14 days discovery → filing

Incident timeline

undetected · 1760 days

discovery → filing · 14 days

Jun 1, 2019

Begins

Mar 26, 2024

Discovered

Apr 9, 2024

Filed

This filing is one of 12 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

South Carolina State AGbd_54dc2a4241a0af372024-04-09Candidate
Montana State AGbd_9c10bf1a6486d8102024-04-09Verified
Vermont State AGbd_ae9a0cefc958af772024-04-09Verified
Indiana State AGbd_ff7d944ebd2888c92024-04-09Verified

Show 6 more filings ↓up to 16d gap

Washington State AGbd_2c04c4a158e44fd22024-04-10 · +1dVerified
Massachusetts State AGbd_36f4d420cf6fa07e2024-04-10 · +1dVerified
Oregon State AGbd_7534be63ba9185ec2024-04-10 · +1dVerified
New Hampshire State AGbd_79d7d9a7036db0e92024-04-15 · +6dVerified
Illinois State AGbd_cf6680ffde30d0f82024-04-01 · +8dVerified
Delaware State AGbd_5109fdbae81c15502024-04-25 · +16dVerified

Showing first 10 of 11 linked disclosures.

Name: AT&T INC.
norm: at t
Domain: att.com

Name: AT&T INC.
norm: at t
Domain: att.com
Industry: Telecom & Mediallm

Discovered: Mar 26, 2024
Breach occurred: Jun 1, 2019 – Jun 30, 2019
Undetected for: 1,760 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial credentials
Data elements: Social Security numberDate of birth
Attack vector: Unknown

During the incident: Launched a robust investigation supported by internal and external cybersecurity experts
Reset passcodes for impacted active accounts
Offering one year of complimentary credit monitoring, identity theft detection and resolution services provided by Experian’s IdentityWorks
Changes made: Regularly reviewing and updating the measures we take to protect your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: CA 60-day OK · 6d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 26, 2024
→ Notified: Apr 1, 2024
6d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 26, 2024 → Notified: Apr 1, 2024	6d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGApr 1 · first

South Carolina State AG+8d

Montana State AG+8d

Vermont State AG+8d

Indiana State AG+8d

California State AG+8d · this page

Washington State AG+9d

Massachusetts State AG+9d

Oregon State AG+9d

New Hampshire State AG+14d

Delaware State AG+24d

Pattern: first filing Apr 1 (IL), last Apr 25 (DE) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-583705
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2024
Raw hash: 91cee339c35c0d92378dcba2d9e796354873f9aa23fba67c31c3272242454a59

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityAT&T INC.

Victim entityAT&T INC.

Incidentdiscovered Mar 26, 2024

Stated responseLaunched a robust investigation supported by internal and external cybersecurity experts

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov