Social Security number and passcodes for about 7.6 million current account statement holders and 65.4 million former account holders were posted on the " dark web , " AT&T said .

NEW YORK ( AP ) — The larceny of sensitive selective information belong tomillions of AT&T ’s current and former customershas been recently come upon online , the telecom giant said this weekend .

In a Saturday announcement call the data breach , AT&T said that a dataset found on the “ dark internet ” contains information including some Social Security numbers and passcodes for about 7.6 million current account holders and 65.4 million former write up holders .

Two U.S. Social Security cards overlapping on a dark surface

Whether the data point “ originated from AT&T or one of its vendors ” is still unknown , the Dallas - based fellowship noted — adding that it had launched an investigating into the incident . AT&T has also commence advise customer whose personal information was compromised .

Here’s what you need to know.

What information was compromised in this breach?

Although varying by each customer and account , AT&T say that selective information involve in this breach included Social Security act and passcodes — which , unlike watchword , are mathematical PINS that are typically four digits long .

Full epithet , email speech , mailing address , phone numbers , dates of birth and AT&T account numbers game may have also been compromise . The impact information is from 2019 or earlier and does not appear to let in financial information or call story , the company order .

How do I know if I was affected?

Consumers touch by this breach should be receiving an email or letter now from AT&T about the incident . The email notice get going out on Saturday , an AT&T spokesperson confirmed to The Associated Press .

What action has AT&T taken?

Beyond these notifications , AT&T articulate that it had already reset the passcodes of current users . The company tally that it would pay for course credit monitoring Service where applicable .

AT&T also said that it “ establish a robust investigating ” with national and external cybersecurity expert to investigate the situation further .

Has AT&T seen data breaches like this before?

AT&T has determine several data breaches that range in size and impactover the years .

While the caller says the datum in this modish rupture surfaced on a hacking forum most two weeks ago , it nearly resembles a similar falling out that show up in 2021 but which AT&T never recognize , cybersecurity investigator Troy Hunttold the AP Saturday .

“ If they evaluate this and they made the wrong call on it , and we ’ve had a trend of old age pass without them being able to notify touch customer , ” then it ’s likely the company will presently front category action suit , said Hunt , founder of an Australia - based website that warns people when their personal information has been discover .

AT&T sign in front of a building with a tower in the background

A spokesperson for AT&T declined to comment further when asked about these similarities Sunday .

How can I protect myself going forward?

Avoiding data severance entirely can be knavish in our ever - digitized world , but consumers can take some steps to facilitate protect themselves going forward .

The basics include create hard - to - opine parole and usingmultifactor authenticationwhen possible . If you receive a poster about a breach , it ’s good idea to alter your word and monitor account action for any suspicious transactions . You ’ll also want to chit-chat a society ’s official site for reliable contact data — as scammer sometimes endeavor to take advantage of news like data breaches to make headway your reliance through search - likewise phishing emails or phone vociferation .

In addition , the Federal Trade Commissionnotesthat countrywide credit bureaus — such as Equifax , Experian , and TransUnion — put up free credit rating freezes and dupery alert that consumers can set up to help protect themselves from identity element theft and other malicious activity . This clause in the beginning come out onHuffPost .