Two U.S. senators on Tuesday asked AT&T to answer questions about a massive hacking incident in April that resulted in the illegal downloading of about 109 million customer accounts at the U.S. wireless company.
Senator Richard Blumenthal, a Democrat who chairs a subcommittee on investigations and Republican Josh Hawley, sought details after AT&T disclosed on Friday its call logs were copied from its workspace on a Snowflake cloud platform covering about six months of customer call and text data from 2022 from nearly all its customers.
"The stolen information can easily provide cybercriminals, spies, and stalkers a logbook of the communications and activities of AT&T customers over several months, including where those customers live and travelled — a stunning and dangerous breach of its customers’ privacy and intrusion into their personal lives," the letter to AT&T CEO John Stankey said, asking if the wireless company will compensate consumers.
AT&T said it would respond directly to the senators.
"There is no reason to believe that AT&T’s sensitive data will not also be auctioned and fall into the hands of criminals and foreign intelligence agencies," the senators added.
Snowflake did not immediately respond to a request for comment.
In a separate letter to Snowflake, the senators raised concerns about other recent data breaches of Snowflake clients.
"The recent AT&T disclosure — three months after the breach and following other announced breaches — raises concerns that we still do not know the full scope or impact of the campaign targeting Snowflake customers," the senators wrote.
The FBI is investigating. AT&T said at least one person has been arrested. AT&T's breach is the latest big hack to hit a wide swath of Americans, coming on the heels of a ransomware attack on UnitedHealth Change Healthcare unit in February that hit an estimated one-third of the country whose private data may have been exposed.
The Federal Communications Commission said it also has an ongoing investigation.
In March, AT&T said it was investigating a data set released on the "dark web" and said its preliminary analysis showed it affected approximately 7.6 million current account holders and 65.4 million former account holders. The company said the data set appeared to be from 2019 or earlier.
Latest Stories
-
Emmanuel Essiam seals loan move to Belgian side Royal Francs Borains
55 seconds -
Glorious Women on the Go donates to O’Reilly Senior High School
6 minutes -
Ridge Hospital incident: Some arrests have been made – Health Minister
20 minutes -
Mismanagement of public funds: PAC vows value for every cedi – chases scholarship beneficiary for refund
21 minutes -
Lands Commission launches digital geospatial data system
21 minutes -
Lawyer urges Peace Council to prioritise private dialogue over public condemnations
26 minutes -
The Overtaking Olympics: Dispatches from the Accra–Kumasi Highway
30 minutes -
Kpedze Anoe gains access to clean drinking water
34 minutes -
Former SSNIT boss, Ernest Thompson chairs re-constituted board of Petroleum Commission
37 minutes -
Bernard Mensah joins UAE side Al-Nasr on two-year deal
42 minutes -
BoG GH¢60bn sterilisation policy inimical to economy – Minority
47 minutes -
I will use high-profile GHALCA Top 4 friendlies to assess readiness of Kotoko for Africa – Zito
51 minutes -
‘Timing of GHALCA Top 4 worrisome’ – Didi Dramani
1 hour -
Absa Bank introduces Agency Banking to boost financial access
1 hour -
Galamsey threats could trigger Ghana energy blackout
2 hours