AT&T fined $13M for data breach after giving customer bill info to vendor | Ars Technica
“AT&T used the vendor to generate and host personalized video content, including billing and marketing videos, for AT&T customers,” an FCC press release said. “Under AT&T’s contracts, the vendor should have destroyed or returned AT&T customer information when no longer necessary to fulfill contractual obligations, which ended years before the breach occurred. AT&T failed to ensure the vendor: (1) adequately protected the customer information, and (2) returned or destroyed it as required by contract.”
