Cyber Risks · Krebs on Security

Why You Should Opt Out of Sharing Data With Your Mobile Provider

Summary: AT&T disclosed a breach at a marketing vendor that exposed account information for nine million customers, including names, wireless account and phone numbers, and email addresses, with a small percentage of records also exposing rate plan names, past due amounts, monthly payment amounts and minutes used. The data was several years old and mostly related to device upgrade eligibility, and AT&T said it did not include credit card or Social Security numbers or account passwords.

Key Takeaway: CPNI such as balances and payment amounts can be used by fraudsters to make impersonation emails and texts more believable when phishing AT&T customers, and the carriers can change their privacy policies at any time with continued use of service counted as agreement.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related