Army Soldier Sentenced to 70 Months for Large‑Scale Telecom Metadata Theft

A U.S. Army soldier was sentenced today to 70 months in federal prison after pleading guilty to a 2024 intrusion that harvested mobile call and text metadata from more than 100 million AT&T customers.

The service member admitted to breaching the networks of both AT&T and Verizon, extracting detailed call‑detail records and text logs that revealed who communicated with whom, when, and for how long. The operation, described by investigators as one of the most extensive unauthorized accesses of telecom data in recent years, was carried out using credentials obtained while the soldier was on active duty.

Federal judges imposed a 70‑month term and ordered the defendant to pay nearly $300,000 in restitution, a figure meant to cover the costs of the investigation, victim notification and other related expenses.

The case highlights the Department of Defense’s ongoing efforts to enforce strict cyber‑security standards among its personnel. Insider threats, especially those involving individuals with privileged access to sensitive systems, have become a focal point for military and civilian agencies alike.

Industry analysts note that the breach exposed lingering weaknesses in how telecom providers safeguard metadata, prompting AT&T and Verizon to reassess their security architectures and tighten monitoring of privileged accounts. Regulators have repeatedly warned that such data, while not content, can still reveal intimate details about users’ lives.

The convicted soldier will report to a federal correctional facility to begin serving his sentence. Prosecutors have indicated that the investigation remains open for any additional participants, and the outcome is expected to serve as a deterrent against future cyber‑crimes committed by members of the armed forces.