Should you’re certainly one of AT&T’s mobile prospects, you may examine your account to see in case your knowledge was compromised as a part of the large breach the telecom large introduced on Friday. 

Should you have been an AT&T buyer between Might 1, 2022 to Oct. 31, 2022, it is seemingly your knowledge was concerned, on condition that the corporate mentioned “almost all” its mobile prospects’ information have been gathered by hackers throughout that point. The breach additionally consists of information from Jan. 2, 2023 for a “very small variety of prospects,” AT&T mentioned.

However prospects can examine if their knowledge was compromised by logging into their accounts, based on AT&T.

“When prospects log in, they’ll see if their knowledge was affected. They will additionally request a report that gives a extra user-friendly model of technical info that was compromised,” an AT&T spokesperson advised CBS MoneyWatch.

The corporate additionally mentioned it’ll alert prospects who have been impacted through textual content, electronic mail or U.S. mail.

The corporate is not offering id theft safety to prospects right now, the corporate spokesperson advised CBS MoneyWatch. AT&T mentioned prospects can go to att.com/DataIncident for extra info. 

The compromised knowledge includes information of calls and texts for AT&T prospects, however would not embody the content material of the calls or texts, or private info similar to Social Safety numbers, beginning dates or different personally identifiable info. 

Why did AT&T wait to alert prospects?

Below U.S. securities rules, corporations should disclose knowledge breaches inside 30 days of studying concerning the safety downside. AT&T mentioned that it realized concerning the hack in April, however delayed informing prospects as a result of it was working with companies such because the Division of Justice and the FBI, which decided that disclosing the breach may trigger safety dangers.

“The breach is taken into account a nationwide safety concern as a result of these name logs reveal social and/or skilled networks of individuals,” mentioned Patrick Schaumont, professor within the Division of Electrical & Laptop Engineering at Worcester Polytechnic Institute, in an electronic mail.

He added, “If particular person A has a task related to nationwide safety, then particular person A’s social community is a legal responsibility. So, particular person A’s name log should be saved secret. That is why the Division of Justice prevented AT&T from disclosing the breach till now.”

AT&T hasn’t revealed the id of the hacker or hackers accountable, however famous that one particular person has been apprehended in reference to the breach.