AT&T Points Finger at Vendor Employees for Security Breach

AT&T isn’t saying how many of its wireless customers had their personal information compromised in a data breach that happened over a 12-day period two months ago.

The mobile giant confirmed what was widely reported last week, that it had suffered a breach between April 9 and April 21. AT&T says employees of one of its vendors stole customer information, including call records and Social Security numbers. The company discovered the breach on May 19 and recently notified authorities in California.

“We recently learned that three employees of one of our vendors accessed some AT&T customer accounts without proper authorization,” the company said in a prepared statement. “This is completely counter to the way we require our vendors to conduct business.”

AT&T has promised to take steps to keep it from happening again.

Follow senior online managing editor @Craig_Galbraith on Twitter.