AT&T has revealed that data from the majority of its customers between May 1, 2022 and October 31, 2022, as well as on January 2, 2023, was stolen and transferred to a third-party platform in April 2024. Affected customers will be notified and AT&T has secured the access point used in the cyberattack, preventing further data exposure. The stolen information includes phone numbers, call durations, and text message records, but did not include any personally identifiable information like Social Security numbers or dates of birth. The company has identified and apprehended a suspect in connection with the breach. Additionally, AT&T disclosed a separate data leak involving 7.6 million customer passwords on May 31, 2024. Customers can manually check if their data was affected through various channels provided by AT&T. This incident serves as a reminder for businesses to prioritize cybersecurity measures and have contingency plans in place in case of a breach.