A Notorious Hacker Gang Claims to Be Selling Data on 70 Million AT&T Subscribers

A prolific hacker gang claims to be promoting knowledge on 70 million AT&T clients, the likes of which would seem to incorporate names, cellphone numbers, social safety numbers, DOBs, house addresses, and extra.

On Thursday, RestorePrivacy broke the news that the ShinyHunters, a well-known threat actor, was promoting the obvious database on RaidForums, a preferred darkish net market. The cybercriminals are asking for $1 million for the complete database, and are promoting segments of the info for $30k apiece.

The telecom has denied that the info is respectable. When reached for remark, an AT&T spokesperson instructed Gizmodo:

Based on our investigation immediately, the knowledge that appeared in an web chat room doesn’t seem to have come from our programs.

The cautious wording right here would appear to indicate the telecom hedging in opposition to a extra definitive refutation. In reality, in a follow-up e-mail to BleepingComputer, the corporate equivocated over whether or not the info might have been stolen from a third-party: “Given this information did not come from us, we can’t speculate on where it came from or whether it is valid,” the agency mentioned.

In the previous, ShinyHunters has focused the likes of Microsoft, Mashable and droves of different small- to mid-sized platforms. Its modus operandi is to steal or purchase giant troves of information, then dump and promote the digital bounties on underground platforms.

The incident additionally comes solely a number of days after fellow telecom T-Mobile revealed an information breach that uncovered the non-public info of tens of thousands and thousands of its clients. In gentle of this, the timing of the Hunters sale may very well be considered as suspect—as it might provide the well-known group a chance to cash-in on fears of telecom breaches. On the opposite hand, the Hunters have constructed a fame on promoting knowledge stolen from giant firms.

The hackers had a curt retort to AT&T’s denial: “[T]hey will keep denying until I leak everything,” one of many cybercriminals instructed RestorePrivacy.