Data leak [loss] $15M+

"Hackers are breaking into AT&T email accounts to steal cryptocurrency"

2023-04-26 [vendor] AT&T customer wallet compromises
Primary Source ↗
Financial Loss $15.0M (15,000,000 USD)

Incident Details

TechCrunch reported that attackers were able to gain access to AT&T email accounts which they then used to gain access to customers’ cryptocurrency accounts. Various customers reported their accounts at exchanges including Coinbase and Gemini had been drained. One individual victim lost $134,000 from their Coinbase account.An anonymous source corresponding with TechCrunch claims that the total amount of cryptocurrency stolen is somewhere between $15 million and $20 million. The tipster also claimed that the hackers have the ability to gain access to any AT&T account via the AT&T employee portal; AT&T has denied this and instead claimed that “the bad actors used an API access.”

Total loss estimated at $15,000,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
AT&T customer wallet compromises

Timeline

  1. 2023-04-26 Breach occurred
  2. 2023-04-26 Publicly disclosed