AT&T is notifying millions of customers that some of their information was exposed after a third-party vendor was hacked.
CPNI is information related to the telecommunications services purchased by the customers, including the number of lines for each account or the wireless plan to which customers are subscribed.
“We recently determined that an unauthorized person breached a vendor’s system and gained access to your “Customer Proprietary Network Information” (CPNI).” reads a data breach communication sent by the company to the impacted customers. “However, please rest assured that no sensitive personal or financial information such as Social Security number or credit card information was accessed.”
Exposed data don’t include financial information (i.e. credit card data) or sensitive data (i.e. Social Security Number, account passwords).
The vendor was hacked in January, and AT&T told its customers that vulnerability exploited by the attackers has been already fixed. The Telco giant added that its systems were not compromised.
The company has notified federal law enforcement, but the data breach notification does not provide the number of impacted customers.
