5 ms·
I use a different email address for every service. I can confirm that my att@ email is in the dataset. So the data originated from AT&T.
by cptskippy 3y ago
I use a different email address for every service. I can confirm that my att@ email is in the dataset. So the data originated from AT&T.
- TheDong 3y agoI think what AT&T is saying is that it wasn't taken from AT&T servers. Rather, AT&T gave the data to some third-party data-processor (i.e. to some ad company), and that company then lost it. ... Honestly, that shouldn't really make us feel any better about them though, like why would AT&T give out data that includes SSNs to third-party data-processors.
- bearjaws 3y agoIf this is true, and they sent SSN willingly to random third parties, they should be forced to pay for a decade of credit monitoring.
- Dalewyn 3y agoI'm pretty sure I have several lifetimes' worth of free credit monitoring with all the breachleaks happening all the damn time, if I could be arsed to redeem them.
- cptskippy 3y agoIt would be nice if they just automatically signed you up for them. They already have and leaked your PII...
- SteveNuts 3y agoHow long until we see speculators opening life insurance policies for people based on breached PII and PHI? "This guy looks like he could drop dead any minute, let's put a million dollars on him"
- GrinningFool 3y agoThat would mostly benefit the monitoring services, and still leave each individual customer on the hook to fix the issues this caused for them. "free credit monitoring" should not be a considered a valid solution to "oops we leaked your private data".
- addandsubtract 3y agoThat's almost worse than leaking it themselves. There's also no excuse for sharing that data.
- michaelcampbell 3y agoIndeed, AT&T is more concerned about BEING breached as a first order than data under their responsibility got out... anywhere. I doubt anyone affected will care about any such distinction.
- butlike 3y agoBut the static pieces of information like address, phone number, etc. can carry over between services. Is there any reason to suspect a Frankenstein breach, where only the subscriber email list was leaked, and the other data was correlated into personas, giving the impression it all came from one source?
- cptskippy 3y agoThey would need more than an email address to make a meaningful match in this case, since we're stating the email is unique to AT&T. That being said, I've never heard of hackers performing Master Data Management but I guess it's possible. I'd hope they'd use something other than full name for their matches...
- m463 3y agoSame here. and I gave my name to them in a particular unique way. I have been getting phisting emails to that name and email addresss for a while now.
- toast0 3y agoMy att@ address is also in the data set. I've used AT&T wireless, landline, and u-verse/fiber, all in California, but didn't think to use different addresses for them [1]. Additionally, in May 2023, someone attempted to open a Bank of America account using my att@ email address and presumably other details from the data. So that was fun. [1] maybe the wireless was with cingular@ though, I think I signed on before AT&T reassembled, like the T-1000.