Settlement and Compliance
AT&T agrees to a $13 million settlement with the , resolving inquiries into its failure to safeguard customer data following a vendor's breach affecting nearly 9 million accounts.
The consent decree mandates AT&T to enhance data governance, improve vendor management, and conduct annual compliance audits to prevent future breaches.
Data Breach Details and Responses
The January 2023 breach exposed customer names, account numbers, phone numbers, and email addresses, but not sensitive information like credit card details or Social Security numbers.
In response to the breach, AT&T commits to strengthening internal data management and imposing stricter data handling practices on vendors.