The company said that the threat actors accessed 9 million customers’ CPNI, which includes data on the services people use and is maintained for marketing purposes.
AT&T said in its email to customers that the breach did not include Social Security numbers, credit card details or other sensitive personal and financial information.