On April 8, 2015, the Federal Communications Commission (FCC) announced a settlement with AT&T imposing a US$25 million fine  for three data breaches associated with its call centres in Mexico, the Philippines, and Colombia. According to the FCC’s Order, personal information of 28,000 of AT&T’s customers were improperly accessed and disclosed by employees to third parties. Customers’ names, full or partial Social Security Numbers and other personal information associated with the customers’ accounts were accessed over 168 days. In addition to the US$25 million fine, AT&T will implement a compliance plan and reports to improve the data protection and security at these data centres.

FCC Press Release