AT&T resets passcodes after 73 million current and former users affected by dark web leak

AT&T said that personal data from 73 million current and former users was leaked on the dark web and the phone giant has already reset the passcodes of millions of current customers who were impacted.

The data set, which appears to be from 2019 or earlier, was released on the dark web about two weeks ago, AT&T said Saturday. 

The information that was leaked "varied by customer and account, but may have included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number and passcode," the company said.

AT&T is offering free identity theft and credit monitoring to individuals who may have been compromised by the leak. 

A preliminary analysis shows that 7.6 million current AT&T users and 65.4 million former users are impacted, the cellular provider also said.

It is unclear whether the leaked data set came from AT&T or one of its vendors, the company also said. "Currently, AT&T does not have evidence of unauthorized access to its systems resulting in theft of the data set."

Users impacted by the leak will receive an email or a letter from AT&T regarding the incident and what information was compromised. 

The leak comes after AT&T suffered a massive network outage for nearly 12 hours last month. The company said the outage, which affected more than 71,000 customers, was not the result of a cyberattack, but rather an issue in a process that the provider was performing to expand its network.

Follow Madeleine Hubbard on X or Instagram.