Categories Online News Press Tech

AT&T reportedly gave $370,000 to a hacker to delete its stolen customer data

/

The company negotiated through an intermediary security researcher, according to Wired.

p>span:first-child]:text-gray-13 [&_.duet–article-byline-and]:text-gray-13″>

Share this story

Illustration of a phone with yellow caution tape running over it.

a:hover]:text-gray-63 [&>a:hover]:shadow-underline-black dark:[&>a:hover]:text-gray-bd dark:[&>a:hover]:shadow-underline-gray [&>a]:shadow-underline-gray-63 dark:[&>a]:text-gray-bd dark:[&>a]:shadow-underline-gray”>Illustration by Amelia Holowaty Krales / The Verge

AT&T paid a hacker about $370,000 to delete customer data that was stolen from it as part of a hacking spree earlier this year. The hacker then provided a video to prove they had deleted the data, according to a Wired report today.

AT&T reportedly negotiated through an intermediary, called Reddington, acting on behalf of a member of the ShinyHunters hacking group. The hacker originally asked for $1 million before AT&T talked them down to the amount, which it paid on May 17th in bitcoin, Wired writes.

The outlet reports that Reddington, whom AT&T paid for his part in negotiations, said he believes the only complete copy of the data had been deleted after AT&T paid the ransom, but that it’s possible excerpts are still in the wild. Reddington also reportedly said he negotiated with several other companies for the hackers, too.

Before AT&T announced the breach, it was reported that Ticketmaster and Santander Bank were also compromised, via the stolen login credentials of an employee of third-party cloud storage company Snowflake. Wired reports that, after the Ticketmaster attack, hackers used a script to hack potentially more than 160 companies simultaneously.