Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

If you have an iPhone with AT&T, there's a good chance your info has been stolen

Last updated

AT&T is finally resetting passcodes for current customers after hackers stole a trove of customer data more than two years ago.

The vast majority of the compromised passcodes belong to some 65.4 million current and former AT&T customers. However, the company has reset passcodes for 7.6 million of its current customers, in the typical abundance of caution often cited.

The passcodes are usualy four-digit numbers used to help verify customer accounts when they are being accessed by customers or AT&T support staff. No account passwords were compromised in the breach.

Although the passcodes and other information were encrypted, it remains possible to decipher the data. In addition to the passcodes, the data leaked includes customer names, dates of birth, home addresses, phone numbers, and Social Security numbers.

The stolen data was first reported on hacker forums in 2021. AT&T denied that the hack was real — until now.

The company continues to say that it does not have any evidence of "unauthorized access to its systems resulting in exfiltration of the data set."

It has set up a new webpage reporting the incident, with tips on how customers can keep their account secure.

"Our internal teams are working with external cybersecurity experts to analyze the situation," AT&T said in its statement. It added that the compromised data "does not contain personal financial information or call history," and the company will be offering complimentary identity theft and credit monitoring services to affected customers.



23 Comments

tht 5654 comments · 23 Years

How nice. ATT’s login page isn’t even working for me, as of this moment. Sigh. 

My cellphone and Internet expenses, all with ATT, are the second highest expense I have. $4000 per year for 7 cell lines and fiber Internet. 

I actually don’t mind it as I can see what I’m getting out of it. Auto insurance? I don’t think I’m benefitting much from it. If your rates go up after an accident, grrr…

killroy 286 comments · 17 Years

Only four digits in the pass code good grief AT&T.

eriamjh 1771 comments · 17 Years

killroy said:
Only four digits in the pass code good grief AT&T.

The passcode is downright worthless.  Another 4-digit code to forget.  


How about 2-factor login?   How about non-socially stealable  questions (not “what street did you live on” or “what city were you born”, but something not guessable from your address or commonly posted info).

djkfisher 131 comments · 13 Years

Well I was able to get into AT&T and I did change the password 

quazze 34 comments · 11 Years

I hope there’s a civil lawsuit that goes into effect. Corporations should be held liable and accountable if my personal information is stolen from their possession.