2024-yilda AT&T 109 million mijozning nozik aloqa jurnallarini yo'qotdi — bu ulkan ma'lumotlar buzilishi edi. Qo'ng'iroq jurnallari siz haqingizda ko'p narsani ochib berishi mumkin, masalan, eng yaqin munosabatlaringiz, qayerda yashashingiz va ishlashingiz, shuningdek, kundalik tartibingizni.
109 million kishi (amerikaliklarning deyarli uchdan biri) 2024-yil aprel oyida ulkan ma'lumotlar buzilishidan aziyat chekdi, bu ularning AT&T aloqa jurnallarini fosh qildi.
AT&T 2022-yil maydan oktyabrgacha va 2023-yil yanvarda nozik ma'lumotlarni, jumladan, telefon raqamlari, qo'ng'iroq va matn sonlari, qo'ng'iroq davomiyligi va joylashuv ma'lumotlarini yo'qotdi. Bu ma'lumotlar buzilish paytida taxminan ikki yillik edi va hozirgi hamda sobiq mijozlarga ta'sir qildi.
AT&T aytishicha, yozuvlarda qo'ng'iroq mazmuni, mijoz ismlari yoki ijtimoiy ta'minot raqamlari bo'lmagan. Bu unchalik tinchlantiruvchi emas, chunki hatto o'z-o'zidan qo'ng'iroq jurnallari siz haqingizda ko'p narsani ochib beradi.
Qo'ng'iroq jurnallari nima?
Har bir qo'ng'iroq, matn va ma'lumot seansi operator tarmog'ida yozuvlar hosil qiladi. Bu yerda muhim bo'lgan ikki tur:
- SIP xabarlari. Session Initiation Protocol (SIP) qo'ng'iroqlar va matnlarni, ham operator ichida, ham tarmoqlar orasida boshqaradi. Bir xabar seansni boshlaydi, boshqasi esa tugatadi. Operatorlar ularni asosan uzilgan qo'ng'iroqlar va yuborilmagan matnlarni bartaraf etish uchun ishlatadi.
- Qo'ng'iroq tafsilotlari yozuvlari (CDR). CDR har bir qo'ng'iroq, matn va ma'lumot seansini umumlashtiradi: kim ishtirok etgan, qachon, qancha vaqt, va ko'pincha telefoningiz qaysi uyali stansiyadan foydalangan. Operatorlar ularni hisob-kitob va rouming hamkorlari bilan to'lovlarni tartibga solish uchun ishlatadi.
Sizning qo'ng'iroq jurnallaringizga kirish huquqiga ega bo'lgan har kim sizning eng yaqin munosabatlaringizni aniqlashi, uy va ish joyingizni topishi, va kundalik tartibingizni o'zingizdan ham batafsilroq qayta tiklashi mumkin. Agar siz bir necha yil oldin onkologga qo'ng'iroq qilgan bo'lsangiz, ehtimol bu haqda yozuv bor, qancha vaqt gaplashganingiz va qayerda bo'lganingiz. Agar keyin eski do'stingizga matn yuborgan bo'lsangiz, bu haqda ham jurnal bor.
Qo'ng'iroq metama'lumotlari hatto ommaviy ma'lumotlar bilan bog'lanib, shaxsni aniqlashga yordam berishi mumkin.
Malte Spitz bu qanchalik uzoqqa borishini ko'rsatdi. 2011-yilda u o'z telekomidan o'zi haqidagi ma'lumotlarni sud orqali talab qildi, taxminan 35 000 yozuv oldi va bir necha yillik faoliyatining hayratlanarli darajada aniq qayta ijrosini tikladi.
Nima uchun qo'ng'iroq jurnallarini olish oson
Uch narsa ularni oson nishonga aylantiradi.
Ular uzoq vaqt saqlanadi. Ko'pchilik operatorlar qancha vaqt saqlanishini aytmaydi. Maxfiylik siyosatlari odatda ma'lumotlarni "siyosat maqsadlarini bajarish uchun zarur bo'lgan muddatgacha" saqlashni va'da qiladi. 2022-yilda FCC raisining so'roviga javoban, operatorlar geolokatsiya ma'lumotlarini besh yilgacha saqlashlarini ma'lum qildi, bu telefon xizmati talab qilganidan ancha uzoqroq. Buning bir sababi — uni monetizatsiya qilish.
Ular bir nechta katta nishonlarda joylashgan. Operator ma'lumotlari tez-tez buziladi. AT&T Snowflake mijozlaridan biri bo'lib, Ticketmaster va Neiman Marcus bilan birga hisob ma'lumotlari o'g'irlanishidan aziyat chekdi. Xitoy bilan bog'liq Salt Typhoon kampaniyasi, xabarlarga ko'ra, har bir yirik AQSh operatorini buzib kirgan, bu esa har qanday amerikalikning qo'ng'iroq metama'lumotlarini qo'lga kiritish imkoniyatini yaratishi mumkin.
Ularning boshqa xaridorlari ham bor. Saqlangan jurnallar batafsil xulq-atvor profillarini yaratish uchun ishlatiladi, ular reklama tarmoqlari va ma'lumot brokerlariga sotiladi va ba'zi hollarda hukumatga topshiriladi.
AT&T buzilishi — bu bashorat qilinadigan natija. Yozuvlar o'g'irlanishi mumkin edi, chunki ular mavjud edi.
O'zingizni shaxsiy uyali aloqa xizmati bilan himoya qiling.
Cape — Amerikadagi maxfiylikni birinchi o'ringa qo'yadigan mobil operator, cheksiz gaplashish, matn va 4G/5G ma'lumotlarini taqdim etadi, maxfiylik va xavfsizlikni asosiy tamoyil qilib qurilgan.
Ko'pchilik operatorlar hamma narsani kuzatadi: qayerga borasiz, kimga qo'ng'iroq qilasiz, nima qilasiz. Cape xizmat ko'rsatish uchun zarur bo'lgan minimal ma'lumotni to'playdi, qo'ng'iroq va matn metama'lumotlarini 24 soatdan keyin o'chiradi, kuzatuvni oldini olish uchun tarmoq identifikatorini aylantiradi, SIM va tarmoq asosidagi hujumlardan himoya qiladi va boshqalar.
Maxfiylik qimmatga tushmasligi kerak. Bugun o'ting va umr bo'yi $29 chegirma oling.
Batafsil ma'lumot →
Cape unutish uchun qurilgan
Cape qo'ng'iroq va matn metama'lumotlarini yillar emas, kunlar ichida o'chiradi. Boshqa MVNOlardan farqli o'laroq, Cape o'z mobil yadrosini boshqaradi va o'z jurnallarini ishlab chiqaradi, bu esa jurnallar qachon o'chirilishini nazorat qilish imkonini beradi.
Uning Yo'qolib boradigan qo'ng'iroq jurnallari xususiyati har bir yozuv turi uchun qisqa saqlash oynasini belgilaydi:
Yozuv | Cape | Boshqa operatorlar SIP xabarlari | 14 kun | Oylar Ichki CDRlar | 1 kun | Yillar Hisob-kitob CDRlari | 30 kun | Yillar Kundalik jami | 60 kun | Yillar
Cape abonenti qo'ng'iroq qilganda, signalizatsiya eng yaqin radio minorasiga va Cape hamkor tarmoq operatoriga boradi, u esa uni Cape mobil yadrosiga uzatadi. Yadro uni qabul qiluvchining operatoriga yuboradi.
Cape SIP xabarlarini tarmoq muammolarini bartaraf etish uchun 14 kun saqlaydi, ularni ichki CDRlarga aylantiradi va ularni bir kundan keyin o'chiradi. Kundalik jami (har bir abonent uchun qo'ng'iroqlar, SMS, MMS va ishlatilgan ma'lumotlar soni) hisob-kitob va spam oldini olish uchun 60 kungacha saqlanadi.
Hamkor tarmoqlar tomonidan hisob-kitob dalili sifatida yuborilgan CDRlar 30 kun saqlanadi, bu hisobni bahslashish uchun yetarli muddat.
Cape hamkorlari va minoralar operatorlari ham jurnallar hosil qiladi. Shuning uchun Cape minoralar ko'radigan identifikatorlarni aylantiradi, bu esa ularning bu jurnallarni siz bilan bog'lash qobiliyatini zaiflashtiradi.
Audit
Saqlash da'vosi faqat tekshirish mumkin bo'lgan narsaga arziydi. Cape 2026-yil may va iyul oylarida Trail of Bitsni xususiyatni audit qilish uchun yolladi va attestatsiyani e'lon qildi.
Audit davomida Trail of Bits berilgan ikki da'voning buzilishini isbotlovchi hech qanday dalil topmadi:
- CDR fayllari saqlash siyosatiga muvofiq o'chirilmoqda.
- Cape CDRlardan individual iste'molchilar haqidagi ma'lumotlarni, kundalik jamidan tashqari, ajratib olmaydi yoki saqlamaydi. Kundalik jami — bu abonent bir kunda ishlatgan qo'ng'iroqlar soni, SMS soni, MMS soni va ma'lumot miqdori. Bu ma'lumot 60 kundan ortiq saqlanmaydi va keyin o'chiriladi.
Siz to'liq audit yozuvini yoki 404 Media yoritishini o'qishingiz mumkin.
Siz ma'lumotlar bazasini buzib kirishni bekor qila olmaysiz, lekin uni kichraytirishingiz mumkin
Yaxshiroq operator xavfsizligi muhim, lekin ishonchliroq nazorat — kamroq saqlash. Qo'ng'iroqdan bir necha kun o'tib o'chirilgan yozuvlar ikki yil o'tib o'g'irlanishi mumkin emas.
Jurnalistlar, rahbarlar, xavfsizlik xodimlari va shifokor, advokat yoki manba bilan gaplashishni reklama qilishni istamaydigan har kim uchun, operatoringizning saqlash siyosati sizning tahdid modelingizning bir qismidir.
Qo'ng'iroq jurnallaringizni o'chiradigan operatorga o'ting. Cape haqida batafsil ma'lumot oling →
Cape tomonidan homiylik qilingan va yozilgan.
In 2024, AT&T lost sensitive communication logs of 109 million customers in a massive data breach. Call logs can reveal a lot about you, like your closest relationships, where you live and work, and your daily routine.
109 million people (nearly a third of Americans) suffered a massive data breach in April 2024 that exposed their AT&T communication logs.
AT&T lost sensitive information including phone numbers, call and text counts, call durations, and location data from May to October 2022, and January 2023, meaning the data was approximately two years old at the time of the breach, impacting both current and former customers.
AT&T said the records didn’t contain call content, customer names, or Social Security numbers. That’s less reassuring than it sounds, because even on their own, call logs reveal a lot about you.
What are call logs?
Every call, text, and data session generates records inside your carrier’s network. The two kinds that matter here are:
- SIP messages. Session Initiation Protocol (SIP) manages calls and texts, both within a carrier and between networks. One message starts a session and another ends it. Carriers use them mainly to troubleshoot dropped calls and failed texts.
- Call Detail Records (CDRs).CDRs summarize each call, text, and data session: who was involved, when, for how long, and often which cell site your phone used. Carriers use them for billing and for settling charges with roaming partners.
Anyone with access to your call logs can identify your closest relationships, locate your home and workplace, and reconstruct your daily routine in more detail than you could yourself. If you called an oncologist a few years ago, there’s likely a record of it, how long you talked, and where you were. If you texted an old friend afterwards, there’s a log of that too.
Call metadata can even be correlated with publicly available information to derive identities.
Malte Spitz showed how far this goes. In 2011 he sued his telecom for the data it held on him, received roughly 35,000 records, and reconstructed a strikingly specific replay of several years of his activities.
Why call logs are easy to get
Three things make them an easy target.
They’re kept for a long time. Most carriers don’t say how long. Privacy policies typically promise to retain data for “as long as necessary to fulfill the purposes” of the policy. In 2022, responding to a request from the FCC chair, carriers disclosed that they kept geolocation data for as long as five years, far longer than phone service requires. One reason isto monetize it.
They sit in a few big targets. Carrier data isfrequently breached. AT&T was one of many Snowflake customers hit by credential-based thefts, alongside Ticketmaster and Neiman Marcus. Salt Typhoon, the China-linked campaign, reportedly compromised every major US carrier, which could put call metadata for any American within reach.
They have other buyers. Retained logs are used to build detailed behavioral profiles that are sold to ad networks and data brokers and, in some cases, handed to the government.
The AT&T breach is the predictable result. The records were available to steal because they existed.
Protect yourself with private cell service.
Cape is America's privacy-first mobile carrier providing unlimited talk, text, and 4G/5G data, built from the ground up with privacy and security at its core.
Most carriers track everything: where you go, who you call, what you do. Cape collects the minimum amount of information required to provide you with service, deletes call and text metadata after 24 hours, rotates your network ID to prevent tracking, defends against SIM- and network-based attacks, and more.
Privacy shouldn't cost more. Switch today and get $29 off for life.
Learn More →
Cape is built to forget
Cape deletes call and text metadata in days instead of years. Unlike other MVNOs, Cape runstheir own mobile core and produces their own logs, meaning they can control when logs are deleted.
ItsDisappearing Call Logs feature sets a short retention window for each record type:
RecordCapeOther carriers SIP messages 14 days Months Internal CDRs 1 day Years Billing CDRs 30 days Years Daily totals 60 days Years
When a Cape subscriber makes a call, the signaling goes to the nearest radio tower and to Cape’s partner network operator, which passes it to Cape’s mobile core. The core forwards it to the recipient’s carrier.
Cape keeps SIP messages for 14 days to debug network issues, converts them into internal CDRs, and deletes those after one day. Daily totals (counts of calls, SMS, MMS, and data used per subscriber) are kept up to 60 days for billing and spam prevention.
CDRs sent by partner networks as billing evidence are held for 30 days, long enough to dispute a bill.
Cape’s partners and the tower operators generate logs too. For that reason Caperotates the identifiers the towers see, which weakens their ability to tie those logs to you.
The audit
A retention claim is only worth what you can verify. Cape hiredTrail of Bits to audit the feature in May and July 2026 and published theattestation.
During the audit, Trail of Bits found no evidence of violation of the two given claims:
- CDR files are being deleted within the retention policy.
- Cape does not extract or retain data from CDRs about individual consumer customers, except daily totals. Daily totals are the number of calls, number of SMS, number of MMS, and amount of data a subscriber used in a day. This data is retained for no more than 60 days and then deleted.
You can read thefull audit write-up or404 Media’s coverage.
You can’t un-breach a database, but you can shrink it
Better carrier security matters, but the more reliable control is to hold less. Records deleted days after a call can’t be stolen two years later.
For journalists, executives, security staff, and anyone who calls a doctor, lawyer, or source they’d rather not advertise, your carrier’s retention policy is part of your threat model.
Switch to a carrier that deletes your call logs. Learn more about Cape →
Sponsored and written by Cape.