AI English summary of an SEC filing — figures as filed
AT&T TThe company said it learned on April 19, 2024 that a threat actor claimed to have unlawfully accessed and copied its call logs. It said threat actors exfiltrated files from an AT&T workspace on a third-party cloud platform between April 14 and 25.
Key points
AI summaryThe company said it learned on April 19, 2024 that a threat actor claimed to have unlawfully accessed and copied its call logs. It said threat actors exfiltrated files from an AT&T workspace on a third-party cloud platform between April 14 and 25.
The company said the leaked files contained customer call and text records from May 1, 2022 to October 31 and on January 2, 2023. It said current analysis indicates the records include those of nearly all of AT&T's wireless customers and MVNO customers.
The company said the data does not include the content of calls or texts, Social Security numbers, dates of birth or other personal identification information. It said the data does include the telephone numbers that interacted with the subscriber's number, counts of those interactions and total call duration by day or month, and that some records also include cell site identification numbers.
The company said the U.S. Department of Justice determined on May 9, 2024 and June 5 that a delay in public disclosure was warranted. It said that as of the filing date, the incident had not had a material impact on its operations and that it does not believe the incident is reasonably likely to materially affect its financial condition or results of operations.
Summary
AI-writtenAnalysis scope · Filing bodyWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.
AT&T Learns of Cybersecurity Incident and Data Exfiltration Details
The company said it learned on April 19, 2024 that a threat actor claimed to have unlawfully accessed and copied its call logs. It said threat actors exfiltrated files from an AT&T workspace on a third-party cloud platform between April 14 and 25.
Source · Based on the filing body and exhibits
Period and Scope of Leaked Records
The company said the leaked files contained customer call and text records from May 1, 2022 to October 31 and on January 2, 2023. It said current analysis indicates the records include those of nearly all of AT&T's wireless customers and MVNO customers.
Source · Based on the filing body and exhibits
Information Included and Excluded in Leaked Data
The company said the data does not include the content of calls or texts, Social Security numbers, dates of birth or other personal identification information. It said the data does include the telephone numbers that interacted with the subscriber's number, counts of those interactions and total call duration by day or month, and that some records also include cell site identification numbers.
Source · Based on the filing body and exhibits
Disclosure Delay, Law Enforcement Cooperation and Impact Assessment
The company said the U.S. Department of Justice determined on May 9, 2024 and June 5 that a delay in public disclosure was warranted. It said that as of the filing date, the incident had not had a material impact on its operations and that it does not believe the incident is reasonably likely to materially affect its financial condition or results of operations.
Source · Based on the filing body and exhibits
AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.
Original filing
The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.
Loading the filing text…