AT&T has paid hackers approximately $370,000 to delete customer data stolen in a hack earlier this year, and Wired reports today that the hackers provided video proof they had done so. AT & T is reportedly negotiated through an intermediary called RedDington, which acts on behalf of the Hacking Group ShinyHunters members. The hacker initially demanded $ 1 million before AT & T talked about this.
The outlet reports that Reddington, whom AT&T paid for his part in negotiations, said he believes the only complete copy of the data had been deleted after AT&T paid the ransom, but that it’s possible excerpts are still in the wild. Reddington also reportedly said he negotiated with several other companies for the hackers, too. Before AT&T announced the breach, employee login credentials for third-party cloud storage company Snowflake had been stolen, and Ticketmaster and Santander Bank were also reported to have been breached. Wired reported that after the Ticketmaster attack, hackers may have used scripts to hack more than 160 companies.