Forest Global Training Partners

Cyber Risks · Krebs on Security

It Might Be Our Data, But It’s Not Our Breach

Summary: Hold Security intercepted a 1.6 gigabyte compressed file on a dark web file-sharing site containing 28.5 million records, including 22.8 million unique email addresses and 23 million unique Social Security numbers, with no passwords in the database. Patterns in the data point to AT&T customers - att.net addresses made up 13.7 percent of all addresses and AT&T domains accounted for nearly 21 percent of the set - while AT&T said the information does not appear to have come from its systems and may be tied to a previous incident at another company.

What you should know: The file closely resembles a database ShinyHunters put up for auction on August 19, 2021 under the title 'AT&T Database +70M (SSN/DOB)' with a $1 million buy-it-now price, and the group's response to AT&T's denial was simply, 'I don't care if they don't admit. I'm just selling.'

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related