Alan Butler Executive Director and President | Official website
Chris Frascella, counsel at the Electronic Privacy Information Center, highlighted that cell site ID numbers can be used to deduce approximate locations, potentially revealing sensitive information. For instance, if an individual made a call near a protest, this could be inferred from the data. It remains unclear whether individuals who are not AT&T customers but received calls from those within the breached data set would be affected by approximate location metadata.
"Every phone number you’ve called or received has been disclosed during the time period that the breach covers," Frascella stated. "So even though they don’t necessarily know the content of the communications, you probably still don’t want them knowing who you’re getting and giving calls to and from." He added, "Are you calling an oncologist office? Are you calling your attorney and is that a divorce attorney? Like sensitive types of calls that even just knowing the phone number can reveal information about you."