AT&T has confirmed a data breach reported last Friday, accusing three employees of one of the company’s third-party service providers of illegally accessing the personal information of an undisclosed number of mobile customers.
“We recently learned that three employees of one of our vendors accessed some AT&T customer accounts without proper authorization,” a statement released by the company said.
“This is completely counter to the way we require our vendors to conduct business.”
The records were exposed between April 9 and April 21, though the breach was reported to have been discovered May 19.
AT&T has not explained why public notification has taken so long, but the delay was most likely due to the continued forensics investigation.
The suspects were allegedly able to access account and call details, including dates, times, call lengths, and who the calls were placed to in an effort to “request codes from AT&T that are used to ‘unlock’ AT&T mobile phones in the secondary mobile phone market.”
“We know our customers count on us and those who support our business to act with integrity and trust, and we take that very seriously,” the company’s statement continued.
“We have taken steps to help prevent this from happening again, notified affected customers, and reported this matter to law enforcement.”
Read More Here…