AT&T suffered a major data breach where a database containing over 86 million customers' personal information was exfiltrated by the ShinyHunters hacking group from a Snowflake environment. The leaked data, reuploaded on a Russian cybercrime forum in early July (after an initial exposure in mid-May), included full names, phone numbers, home addresses, email addresses, birthdates, and nearly 44 million decrypted Social Security numbers (SSNs). While attackers claimed the data was linked to a prior Snowflake-related breach, investigations revealed discrepancies—earlier leaks had encrypted SSNs and were less structured. AT&T acknowledged the incident, stating cybercriminals often repackage old data for financial exploitation, and confirmed an ongoing investigation. The exposure of highly sensitive PII (Personally Identifiable Information), particularly decrypted SSNs, poses severe risks of identity theft, financial fraud, and long-term reputational damage to affected customers. The breach underscores vulnerabilities in third-party cloud environments (Snowflake) and the persistent threat of sophisticated hacking collectives like ShinyHunters.