AT&T says hacker stole data on ‘nearly all’ of its wireless customers

A hacker accessed and downloaded call and text-message data from nearly all AT&T Wireless customers, the company disclosed in a securities filing Friday.

The breach covers calls and texts made from May 1 to Oct. 31, 2022, as well as this past January. The stolen data include numbers customers called or texted and their duration, but doesn’t contain the content of those communications, AT&T said. The company said it doesn’t think the records are available online.

“AT&T has taken additional cybersecurity measures in response to this incident including closing off the point of unlawful access,” the company said.

AT&T has nearly 90 million wireless subscribers, and the hack also affects information from reseller brands that use the AT&T network.

The breach was discovered in late April and reported to the Department of Justice, which AT&T said has apprehended at least one person. The information was taken from a third-party cloud workspace, the company said.

AT&T and Justice Department officials did not immediately respond to a request for comment.

Names and personal information such as Social Security numbers or credit card numbers weren’t compromised, but the carrier warned that cellphone numbers can easily be connected to names through online tools.