A hacker known for other data breaches is selling a database allegedly containing gigabytes of AT&T customer information, including social security numbers, and is asking for $1 million to take it down.
The threat actor, known as ShinyHunters, began selling this database yesterday on a hacking forum with a starting price of $200,000 and incremental offers of $30,000. The hacker states that they are willing to sell it immediately for $1 million.
A security researcher who wishes to remain anonymous told BleepingComputer that two of the four people in the samples were confirmed to have accounts on att.com.
In multiple emails, AT&T has told BleepingComputer that the data is not from their systems and has not recently been breached.
“Based on our investigation today, the information that appeared in an internet chat room does not appear to have come from our systems.” – AT&T.
In the past, ShinyHunters has breached numerous companies, including Wattpad, Tokopedia, Microsoft’s GitHub account, BigBasket, Nitro PDF, Pixlr, TeeSpring, Promo.com, Mathway, and many more.
