If you woke up this morning to an email from AT&T explaining that your call and text records from 2022 were sitting on some hacker's server, congratulations — you're part of the club nobody asked to join.
Roughly 109 million customers had their metadata scraped in a breach that AT&T says it discovered back in April but is only now fessing up to.
The company has been quietly notifying people all week, which is corporate-speak for "we hoped you wouldn't notice." Here's the fun part: this isn't even the first AT&T disaster this year.
Now we're up to two massive breaches in under six months, which is either gross incompetence or an impressive commitment to quantity over quality.
At this rate, AT&T customers should just assume their data is already public and start charging subscription fees for it.
The stolen data includes phone numbers, call durations, and text message metadata — who you contacted and when, though not the actual content of your messages.
So your ex still doesn't know what you said about them, but AT&T apparently let a third party find out that you called them 47 times in one night.
The carrier says at least one person has been arrested, which is the corporate equivalent of finding a nickel under the couch and calling it a win.
Security experts are pointing out that metadata is basically a surveillance goldmine.
You don't need the words when you've got the pattern.
Whistleblowers have shown for years that call records alone can reveal affairs, medical conditions, and which senator you've been secretly coordinating with.
So if you're a journalist, an activist, or just a person with a mildly interesting life, this one stings a little more than the usual "your password leaked" email.
AT&T is offering free identity monitoring through a third party, which is the same thing every breached company offers because it costs them approximately nothing.
Freeze your credit, enable two-factor authentication everywhere, and consider that your carrier has now proven it can't be trusted with a Rolodex, let alone a national network.
The bigger question is why Americans keep tolerating this.
We have three major carriers, all of which have been breached, and switching just means picking which flavor of data leak you prefer.
Regulators talk a big game, but the fines are rounding errors compared to quarterly revenue.
Until that changes, your call logs are basically a public utility. **The takeaway:** AT&T has now leaked more personal data than most people will generate in a lifetime, and their apology tour is being delivered via the same email system that probably sold your address to begin with.
Check your notifications, freeze your credit, and maybe dig out that old burner phone.
Final Thoughts
It's not paranoia if the call records prove they're actually out to get you.