Senators Question AT&T’s Data Storage Practices Following Data Breach
In the wake of a significant data breach, U.S. senators Richard Blumenthal and Josh Hawley have raised concerns about AT&T’s data storage practices. Blumenthal, the chair of the Senate Judiciary Subcommittee on Privacy, Technology, and the Law, and Hawley, the ranking member, have written letters to both AT&T and Snowflake, a third-party platform that AT&T uses for storing call and text records. The senators have demanded more information about the breach and questioned AT&T’s decision to retain and upload sensitive customer communication onto a third-party analytics platform.
The data breach, which occurred in mid-to-late 2022, resulted in the theft of “nearly all” text and phone records. Blumenthal and Hawley have expressed concern over AT&T’s retention of detailed customer communication for an extended period of time and their decision to entrust this sensitive information to a third party. They have called for clarification on AT&T’s policy regarding the retention and use of such information.
The senators also highlighted that other companies using Snowflake, such as Ticketmaster, Advance Auto Parts, and Santander Bank, have experienced breaches of information hosted by the platform. This suggests that the AT&T breach may be attributed to basic cybersecurity failures, including malware infections and unchanged passwords over an extended period.
Adding to the alarming nature of the breach is the revelation that AT&T paid a hacker approximately $370,000 to delete the stolen information. However, there is no guarantee that the data has been completely eradicated despite the payment.
It is clear that the senators are troubled by AT&T’s security practices and are seeking answers regarding the breach. Their inquiries reflect growing concerns about the protection of personal data in an increasingly digitized world. The breach serves as a reminder of the importance of robust cybersecurity measures and the need for companies to prioritize the safeguarding of customer information.
As the investigation into the breach unfolds, it is crucial for both AT&T and Snowflake to provide comprehensive responses to the senators’ inquiries. The incident underscores the urgency for companies to reassess their data storage practices and strengthen their security protocols to prevent future breaches. Customers place their trust in companies to protect their personal information, and it is essential for businesses to demonstrate their commitment to maintaining the privacy and security of customer data.