Data breaches have become a defining risk of modern digital life. The Att breach is one of the most significant in recent memory — and if you've ever had an account with the affected service, your personal data may be circulating among cybercriminals right now.
This guide explains exactly what happened, what data was taken, and how you can check whether your information was exposed — for free, in 30 seconds.
What Happened?
The details of this breach are covered in the FAQ section below, where we answer the most important questions clearly and concisely. The key facts: who was affected, what data was taken, how attackers got in, and what the consequences have been.
Why Does This Still Matter?
Many people assume that because a breach happened years ago, the risk has passed. In reality, stolen data is sold, traded, and reused for years after a breach. Credentials from old breaches are used in credential stuffing attacks — automated attempts to log in to your other accounts using the same email and password combination.
If you reused the same password across multiple sites, one old breach can unlock dozens of your current accounts.
How to Check If You Were Affected
The fastest way is to use our free breach checker. Enter your email address and we'll scan it against known breach databases instantly — no signup required.
If your email appears in a breach, you'll see exactly which breaches affected it and what type of data was exposed. That tells you precisely where to start.
What to Do If You Were Affected
If your data was in this breach — or any breach — take these steps:
- Change the affected password immediately — especially if you reused it anywhere else.
- Enable two-factor authentication on every account that supports it, starting with email and banking.
- Check for suspicious activity on financial accounts if payment data was involved.
- Be alert for phishing — attackers use breach data to craft convincing personalised scam messages.
- Freeze your credit if your Social Security number, passport, or government ID was exposed.
Frequently Asked Questions
How many AT&T breaches happened in 2024?
Two major incidents were disclosed in 2024. In March 2024, AT&T confirmed that data from 73 million current and former customers — including Social Security numbers — had been leaked. In July 2024, AT&T disclosed that call and text metadata for nearly all its customers had been stolen from a third-party cloud platform.
What data was stolen in the January 2024 AT&T breach?
The dataset contained names, addresses, phone numbers, Social Security numbers, dates of birth, and AT&T account numbers for approximately 73 million current and former customers. AT&T reset passcodes for affected current customers.
What data was stolen in the July 2024 AT&T breach?
Call and text message logs — specifically phone numbers called or texted, call durations, and cell site identifiers — were taken for nearly all AT&T cellular customers from May to October 2022, and for a small number of customers on 2 January 2023. Message content was not included.
How do I check if my AT&T data was exposed?
Enter your email or phone number in the free checker at Scan My Shadow. AT&T sent text and email notifications to affected customers in both incidents. You can also contact AT&T directly to verify your account status.
What should AT&T breach victims do about SSN exposure?
If your Social Security number was exposed in the January breach, place a credit freeze with Equifax, Experian, and TransUnion immediately. Monitor your credit reports and watch for IRS tax fraud or medical identity theft using your SSN.
Sources
- AT&T – Notice of data breach (March 2024)
- DOJ – AT&T breach investigation
- Have I Been Pwned – AT&T breach entries