The recent Salt Typhoon hacking campaign orchestrated by Chinese intelligence has compromised the privacy of over a million Americans by stealing their phone metadata from major telecommunications companies. While some individuals whose communications were directly intercepted have been notified, the vast majority of those affected by the metadata breach remain unaware. This is unacceptable. Customers have a right to know when their sensitive information has been accessed without consent. Telecoms like AT&T and Verizon must be compelled to inform all customers whose metadata records were stolen, not just a select few. By failing to notify the impacted individuals, these companies are shielding them from key information regarding a violation of their privacy. Full transparency is essential to allow people to take appropriate precautions and make informed decisions. Furthermore, telecoms should be held accountable for the insufficient security measures that enabled this unprecedented data breach. Their lax safeguards jeopardized the privacy and safety of their customers on a massive scale. Strict consequences and stringent new cybersecurity requirements are warranted to prevent such lapses from reoccurring and protect consumer data. Decisive action is needed to address this situation. Telecoms cannot be allowed to sweep this egregious privacy violation under the rug. The American people deserve full disclosure regarding the compromise of their personal information and assurances that their privacy will be robustly secured moving forward.