AT&T, T-Mobile, New York Times, Google data breach: what happened and what to do
HighUnited StatesOthersPersonal InformationUnknown
Last reviewed June 22, 2025 · 1 record on file · sources listed below
The short answer
A researcher discovered a massive data breach that exposed millions of files containing sensitive business and personal information. The breach affected major companies such as AT&T, T-Mobile, the New York Times, and Google, with the exposed data potentially dating back several years.
If you have an account with AT&T, T-Mobile, New York Times, Google, assume the exposed details are circulating. The practical risk today is rarely the leak itself — it is the calls and messages that use those details to sound legitimate.
What we have on file
Every entry below is a catalogued record with its original source. We do not paraphrase beyond what the source reports.
What to do
- Change the password anywhere you reused itThe exposure matters most when the same password protects your email, because email is how everything else gets reset.
- Treat every call and text about this breach as a scam until proven otherwiseNo company will ask you for a one-time code, a PIN or a password. Hang up and call the number printed on your card.
- Read your statements for the next three monthsCard fraud usually starts with a small test charge. Catching that one is what stops the large one.
- Give your email account a password nothing else usesIt is the account that can reset all the others, so it is the one worth protecting first.
Questions people ask
Was my data in the AT&T, T-Mobile, New York Times, Google breach?
Having an account alone does not confirm exposure. The reliable check is whether your email address appears in the leaked datasets in circulation — that takes seconds and does not require your password.
Is it too late to do anything?
No. Leaked personal details do not expire, and neither does the defence: a unique password on your email, and a fraud alert on your credit file, still work years later.
Will AT&T, T-Mobile, New York Times, Google contact me?
They may. But scammers contact people too, using exactly these breach details to sound convincing. Never act on an inbound call or text — call back on a number you already had.
Browse the catalogue
701 organisations catalogued
Bennett CollegeMediumAscension Parish Sheriff's OfficeHighDorchester County Sheriff’s OfficeLowDropboxHighMassHealthMediumNCAALowNexusHighPennsylvania Governor's OfficeLowPocket BitcoinHighReform UKLowSpanish GovernmentLowThe Mercury NewsHighThomson ReutersHighTrezorHighUnited NationsLow29CMHighAppleHighBetter Business BureauMediumBitcoin kiosk (scam victim)MediumBits of GoldHighBroadcom VMwareHighBureau of PrisonsLowCalifornia voter registration systemLowCBC.caLowColdcardHighCommerzbankMediumDeKalb County CourthouseMediumDelta Air LinesMediumDemocrat Party (DNC)MediumDepartment of Health and Human ServicesMediumDepartment of TransportationLowEssentially SportsMediumEurolaser IT Ltd.MediumEuropean Athletics ChampionshipsLowEvergrandeMediumEverside HealthMediumFederal Reserve, United States Senate, NASAHighFIFALowFIFA World Cup Tickets ScamLowFlorida Health Care ProgramMediumFortinet and Schneider ElectricHighGeorgia State SenateLowGerman financial institutionHighGoogle FirebaseMediumGovernment of LiechtensteinHighGS RetailHighJeon MoMediumJohn OverdeckLowKent Police DepartmentMediumLevi StraussMediumLifespark Management ServicesMediumMedi-CalMediumMedicaidHighMedicareHighMeta PlatformsHighMichigan Unemployment Insurance AgencyHighMinneapolis Public SchoolsMediumMultiple U.S. institutions (including NASA, Federal Reserve, Senate)HighNew Jersey voter registration systemHighNew York CityLowNiva Bupa Health InsuranceLowOntario Provincial Police (OPP)MediumOpenAIHighOpenAI and AnthropicMediumOsceola County JailLowPaidworkHighPolice National Legal DatabaseHighPolish power plant (unidentified CHP plant)HighQueerDocLowRackspace Technology Inc.LowRaiffeisen BankLowRamsey County Sheriff's OfficeMediumSafePalMediumSeeking.comLowSnowflake Inc.HighSogang UniversityHighSoriano ProducLowSouthern Poverty Law CenterLowState DepartmentLowSullivan's IslandMediumSusie WilesMediumSyracuse City School DistrictMediumTae CrowderMediumTeamPCPHighThe Gateway PunditLowTroutman Pepper LockeMediumU.S. crime lab DNA equipment (unspecified vendor/agency)HighU.S. Justice DepartmentHighUberHighUK Government Investments (UKGI)HighUnclearMediumUnited AirlinesLowUnited States GovernmentHighUS Department of LaborHighUS GovernmentLowUS Justice DepartmentHighUtah State GovernmentLowWashington Governor's OfficeLowWhite HouseHighWindRelayHighWondermindLow23andMeHighAdaptHealthHighAEREDIUMLowAlshon JefferyLowAmazon and WalmartLowAmgenHighAnthropicMediumAnthropic PBCMediumBlock, Inc.MediumBreitbart News NetworkMediumCapricor TherapeuticsMediumChick-fil-AMediumCity of KendletonLowCoca-ColaMediumCoinkiteHighConsumer Federation of America (CFA)HighCoupangHighCSI PromotionsLowDepartment of Homeland SecurityHighDepartment of the TreasuryMediumDubai Crown Prince (impersonated)HighErnst & YoungHighFederal Communications CommissionLowFederal Trade CommissionLowFlare NetworkHighGovernment of AlbertaHighGovernment of CanadaMediumGovernment of Canada - Department of Natural ResourcesMediumGreen Environmental, LLCMediumHertel & Brown Physical &MediumHugging FaceHighInternal Revenue ServiceHighKT CorpHighKudankulam Nuclear Power PlantHighLemonadeMediumLouisiana Attorney General’s OfficeMediumMaine Department of Health and Human Services (EBT program)MediumMastercardLowMissouri State Treasurer’s OfficeHighMultiple healthcare entitiesHighN/A - Event Security IncidentLowNew Hampshire Department of Health and Human ServicesMediumNot clearly identifiedMediumOregon State UniversityLowOrigin EnergyMediumPakistan National Cricket TeamLowPennsylvania Department of CorrectionsMediumPenske Media CorporationLowPhiaMediumRingCentralHighRocket Dog RescueLowSecondFiHighShinyHuntersMediumSM Energy CompanyMediumSnapchatHighSonicWallMediumSoniva Dental CareMediumSouth Korea's Foreign MinistryHighSouth Korean Ministry of Foreign AffairsHighSpanish border authoritiesLowState of ArizonaHighState of Georgia (unemployment benefits)MediumSunoLowTaiwan Ministry of Digital AffairsHighTallahassee Housing AuthorityMediumTata ElectronicsHighU.S. Attorney’s Office for the Eastern District of WisconsinMediumU.S. Department of JusticeHighU.S. Tax CourtMediumWalletHubMediumWEMADEHighWestJetHighXMediumYankee StadiumLowActBlueMediumAflacHighAflac JapanHighAlberta governmentHighAlcott HR GroupMediumAlexandra Lozano Law FirmHighAnalog DevicesMediumApna Adult DaycareMediumArkansas MedicaidMediumAT&THighAtlantiCareMediumBerks County District Attorney's OfficeMediumCalifornia Department of Social ServicesMediumCalifornia Water ServiceMediumCalifornia water systemsMediumCalifornia Water Systems (Bakersfield, Visalia, Chico)HighCanada Border Services AgencyLowCanadian Crime Stoppers AssociationMediumCentral East Correctional CentreMediumColumbia Orthopaedic GroupHighDepartment of JusticeMediumDepartment of Justice (target of fraudulent billing scheme involving sleep studies, but no confirmed breach of agency data)MediumElections AlbertaHighEvil CorpHighFederal Bureau of Investigation (FBI)High
Records are catalogued from public reporting and linked to their original source. iTellYou is not affiliated with the organisations listed. If you represent one of them and something here is inaccurate, write to us and we will correct it.