Using the breached data, a scammer might infer which businesses people use based on call patterns. The scammer could then call people posing as their bank, perhaps even including the tidbit that they were affected by the AT&T breach to appear legitimate, and claim that there had been an attempt to open an account. “The scammer will ask for personal information, your address, what car you drive, account IDs, and PIN numbers and passwords of course,” Andrew Showstead, a vice president of privacy company IronVest, told us.
