FCC reaches settlement with AT&T over data breach in vendor cloud environment

The Federal Communications Commission has announced a $13 million settlement with AT&T over a January 2023 data breach of the company’s vendor cloud environment that exposed customer information.

The FCC found that AT&T “failed to meet its duty to protect the confidentiality of customer proprietary information (PI)” and “improperly used, disclosed, or permitted access to individually identifiable customer proprietary network information (CPNI) without customer approval,” according to the consent decree.

The decree adopted on Monday also argues that the...