AT&T and Verizon reportedly are not notifying most customers whose call records were stolen in the ongoing attack attributed to Chinese hacking group Salt Typhoon. NBC News reported today that "the vast majority of people whose call records have been stolen by Chinese hackers have not been notified, according to industry sources, and there is no indication that most affected people will be notified in the near future."
US government officials said last week that major telecom companies have been unable to fully evict the Chinese state-sponsored hackers from their networks. There have been direct notifications to specific targets, such as government officials, whose calls were listened to and whose text messages were accessed. "President-elect Donald Trump, Vice President-elect JD Vance, senior congressional staffers and an array of US security officials were among scores of individuals to have their calls and texts directly targeted," The Wall Street Journal wrote.
For most other victims, the data accessed apparently didn't include the contents of communications. It instead consisted of metadata like the numbers that phones called and when. These people are not receiving notifications from carriers, NBC News wrote today:
The government started investigating the Salt Typhoon hack after Microsoft sounded the alarm about irregularities.
d3sign/Getty Images
The Salt Typhoon hack is one of the largest attacks on US telecommunications ever, officials say.
The yearslong attack originated in China and targeted major telecom companies like AT&T and Verizon.
The NSA says it believes Chinese hackers were targeting senior US political figures.
US security officials have warned that millions of people's personal information could be at risk after a yearslong hacking campaign originating in China.
The US government started investigating the hack in the summer after Microsoft — which named the hack the Salt Typhoon — sounded alarms about anomalies.
Speaking to reporters on Saturday, White House Deputy national security advisor Anne Neuberger said that while data belonging to millions of Americans was likely compromised, the hack targeted senior US officials.
"We believe the calls they recorded and took was really more focused on very senior political individuals," she said.
A report from the Congressional Research Office said Chinese hackers may have sought access to presidential candidates' communications. "With that access, they could potentially retrieve unencrypted communication (e.g., voice calls and text messages)," the report says.
A senior NSA official said in October that hackers from China accessed information from AT&T, Verizon, and Lumen Technologies, according to NBC.
Senate Intelligence Committee Chairman Mark Warner told The Washington Post that the hack is the "worst telecom hack in our nation's history by far."
"This is an ongoing effort by China to infiltrate telecom systems around the world, to exfiltrate huge amounts of data," Warner told the outlet.
The New York Times reported that hackers from China went undetected inside American telecommunications companies for over a year and obtained a nearly complete list of phone numbers that the Justice Department monitors in its "lawful intercept" system. The lawful intercept system is what allows law enforcement, through a court order, to wiretap or "bug" phone calls.
The FBI warned that all US citizens should use a cellphone that automatically updates its operating system and use encryption and multifactor authentication for email and social media accounts.
Neuberger said in an earlier press call on Wednesday that the government does not believe any of the targeted telecom companies have "fully removed" the Chinese hackers from their networks, and communications are still at risk. Senior White House officials on the call said the hack has been ongoing for "likely one to two years."
"President Biden has been briefed multiple times on this compromise," Neuberger told reporters. She added that the White House "has made it a priority for the federal government to do everything it can to get to the bottom of this."
Neuberger said that White House leaders are meeting three times a week to discuss the hack.
The Senate Commerce Subcommittee will hold a hearing on December 11 to discuss security threats to communications networks and review best practices for providers to mitigate consumer risks. The committee will focus on the Salt Typhoon attacks in the hearing.
