INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Carrier Stores Call Logs via Mobile Devices for Years

| 2026-11-02 15:01 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
In April 2024, a massive data breach exposed communication logs of nearly a third of Americans, impacting approximately 109 million people. The breach was carried out by AT&T, which lost sensitive information including phone numbers, call and text counts, call durations, and location data from May to October 2022, and January 2023. This type of data is easily accessible due to the long retention period, with carriers typically keeping records for "as long as necessary" without disclosing exact timescales. The breach was facilitated by AT&T's use of retained logs to build behavioral profiles sold to ad networks and data brokers, making it an attractive target for cyber attackers like those behind the Salt Typhoon campaign that reportedly compromised every major US carrier in November 2026.
Technical Mitigations AI-generated
• Use a carrier that deletes call and text metadata after 24 hours, such as Cape. • Implement the Disappearing Call Logs feature to control when logs are deleted. • Rotate your network ID regularly to prevent tracking by carriers.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Salt TyphoonSalt Typhoon
Target & Sectors
US
telecommunicationstelecommunications
Incident Timeline
‎January 2023
Salt Typhoon, a China-linked campaign, reportedly compromised the call metadata of every major US carrier.
threat_actor Salt Typhoon
Salt Typhoon, the China-linked campaign, reportedly compromised every major US carrier, which could put call metadata for any American within reach.
organisation Call Detail Records
Call Detail Records (CDRs).
data_breach 35,000 records
In 2011 he sued his telecom for the data it held on him, received roughly 35,000 records, and reconstructed a strikingly specific replay of several years of his activities.
organisation FCC
In 2022, responding to a request from the FCC chair, carriers disclosed that they kept geolocation data for as long as five years, far longer than phone service requires.
organisation Ticketmaster and Neiman Marcus
AT&T was one of many Snowflake customers hit by credential-based thefts, alongside Ticketmaster and Neiman Marcus.
Tactical Metrics
Metrics
victims
109,000,000
Customers
In 2024, AT&T lost sensitive communication logs of 109 million customers in a massive data breach.
Metrics
financial
$29
Financial Impact
Switch today and get $29 off for life.
Metrics
data_breach
35,000
Records
In 2011 he sued his telecom for the data it held on him, received roughly 35,000 records, and reconstructed a strikingly specific replay of several years of his activities.
Intelligence Sources
BleepingComputer 2026-11-02