Get the latest tech news
AT&T fined $13M for data breach after giving customer bill info to vendor
AT&T data should have been deleted but remained in cloud for years before hack.
Phone companies are required by law to protect customer information, and AT&T should not have merely relied on third-party firms' assurances that they destroyed data when it was no longer needed, the FCC said. The data "remained in the vendor's cloud environment for many years after it should have been deleted or returned to AT&T and was ultimately exposed" in the January 2023 breach, an FCC Enforcement Bureau order said. "AT&T stated that it monitored impacted customer accounts following the incident and identified no evidence of AT&T account-related fraud or other unlawful or unauthorized activity tied to the Breach," the consent decree said.
Or read this on r/technology