Man
Professional
- Messages
- 3,051
- Reaction score
- 577
- Points
- 113
AT&T will pay $13 million to resolve an FCC investigation into its data protection practices after a January 2023 incident where hackers breached a vendor's cloud environment and stole extensive customer information. The FCC examined whether AT&T took adequate measures to prevent such attacks and safeguard customer data.
As part of the settlement, AT&T must enter a consent decree to enhance its data governance, improve supply chain security, and implement rigorous handling procedures for sensitive data. FCC Chairwoman Jessica Rosenworcel emphasized that telecom carriers are responsible for protecting consumer privacy and must take extra precautions due to their access to sensitive information.
The breach involved a vendor that created personalized video content for AT&T, which neglected to verify the destruction or return of customer data as required. AT&T has started notifying affected customers, whose data included account details and the number of lines associated with their accounts.
This incident is part of a broader scrutiny of telecommunications cybersecurity practices, with the FCC recently securing similar agreements from Verizon. Notably, AT&T also faced scrutiny for paying a ransom in 2022 after hackers accessed metadata from nearly all customer call logs and texts, impacting about 109 million customers.
Do you really think they’re concerned about your data?
As part of the settlement, AT&T must enter a consent decree to enhance its data governance, improve supply chain security, and implement rigorous handling procedures for sensitive data. FCC Chairwoman Jessica Rosenworcel emphasized that telecom carriers are responsible for protecting consumer privacy and must take extra precautions due to their access to sensitive information.
The breach involved a vendor that created personalized video content for AT&T, which neglected to verify the destruction or return of customer data as required. AT&T has started notifying affected customers, whose data included account details and the number of lines associated with their accounts.
This incident is part of a broader scrutiny of telecommunications cybersecurity practices, with the FCC recently securing similar agreements from Verizon. Notably, AT&T also faced scrutiny for paying a ransom in 2022 after hackers accessed metadata from nearly all customer call logs and texts, impacting about 109 million customers.
Do you really think they’re concerned about your data?
