In case you’re one in all AT&T’s mobile prospects, you possibly can examine your account to see in case your information was compromised as a part of the huge breach the telecom big introduced on Friday. 

In case you had been an AT&T buyer between Could 1, 2022 to Oct. 31, 2022, it is doubtless your information was concerned, on condition that the corporate mentioned “practically all” its mobile prospects’ data had been gathered by hackers throughout that point. The breach additionally contains data from Jan. 2, 2023 for a “very small variety of prospects,” AT&T mentioned.

However prospects can examine if their information was compromised by logging into their accounts, in keeping with AT&T.

“When prospects log in, they will see if their information was affected. They’ll additionally request a report that gives a extra user-friendly model of technical data that was compromised,” an AT&T spokesperson instructed CBS MoneyWatch.

The corporate additionally mentioned it can alert prospects who had been impacted by way of textual content, electronic mail or U.S. mail.

The corporate is not offering id theft safety to prospects presently, the corporate spokesperson instructed CBS MoneyWatch. AT&T mentioned prospects can go to att.com/DataIncident for extra data. 

The compromised information includes data of calls and texts for AT&T prospects, however does not embody the content material of the calls or texts, or private data equivalent to Social Safety numbers, delivery dates or different personally identifiable data. 

Why did AT&T wait to alert prospects?

Underneath U.S. securities laws, corporations should disclose information breaches inside 30 days of studying concerning the safety drawback. AT&T mentioned that it realized concerning the hack in April, however delayed informing prospects as a result of it was working with businesses such because the Division of Justice and the FBI, which decided that disclosing the breach might trigger safety dangers.

“The breach is taken into account a nationwide safety concern as a result of these name logs reveal social and/or skilled networks of individuals,” mentioned Patrick Schaumont, professor within the Division of Electrical & Laptop Engineering at Worcester Polytechnic Institute, in an electronic mail.

He added, “If individual A has a task related to nationwide safety, then individual A’s social community is a legal responsibility. So, individual A’s name log have to be saved secret. That is why the Division of Justice prevented AT&T from disclosing the breach till now.”

AT&T hasn’t revealed the id of the hacker or hackers accountable, however famous that one individual has been apprehended in reference to the breach.