Summary

  • On 15 May, cyber criminals started selling a database of 86m customer records stolen in a data breach at US telecoms giant AT&T.
  • The database first appeared on a Russian cybercrime forum, and then reappeared on 3 June, after which it started appearing on other forums too.
  • The data, which includes full names, phone numbers, addresses, dates of birth and social security numbers, has been subsidised by the hackers to encourage buyers to bid, and is being sold piecemeal.
  • This is the third data breach at AT&T in the last 18 months.
  • Security experts are advising AT&T customers to change their passwords, enable two-factor authentication and monitor their credit reports for any sign of fraud.
  • They also suggest that, given the sensitivity of the data, customers should be on the look-out for scam and phishing emails.

By Yadullah Abidi

Original Article