A potential cybersecurity breach involving U.S. telecom giant Verizon has come to light after SafetyDetectives’ Cybersecurity Team uncovered a post on a public forum offering to sell a database allegedly containing sensitive information of over 60 million Verizon customers.
The database was listed for sale on a clear web forum known for hosting leaked databases and cracked software. The post claimed to offer “61 million Verizon USA” records, totaling 3.1 GB, in CSV/JSON format. The dataset was labeled as “2025,” implying that the information was recently obtained.
The sample data shared in the post — 517 records across two screenshots — included first and last names, gender, dates of birth, tax identification numbers, additional personal ID numbers, full addresses, and two phone numbers per customer. While SafetyDetectives’ team reviewed the sample and found the data appeared authentic, they were unable to independently verify whether it belonged to actual Verizon customers.
Verizon, the largest wireless carrier in the United States with 146 million subscribers as of March 2025, has not confirmed any breach at this time. Verizon is yet to respond to TelecomLead.com.
The exposed data, if verified, could pose significant risks, including identity theft, financial fraud, and targeted phishing attacks. Cybersecurity experts warn that such detailed personal information enables threat actors to carry out highly personalized scams and social engineering campaigns.
U.S.-based telecom operators have increasingly become prime targets for cyberattacks, with several high-profile breaches in recent years exposing millions of customer records. These incidents often involve sensitive personal data, including names, addresses, Social Security numbers, and account details, making them valuable to threat actors for identity theft and fraud.
Among the most notable cases, T-Mobile has suffered multiple breaches, with the largest in 2021 impacting over 40 million individuals. In 2023, AT&T reportedly had millions of customer records leaked on the dark web, though the company denied any recent breach.
Rajani Baburajan