AT&T says leaked data of 70M people is not from its systems

I found my own SSN and many friends in the leak. It's clear the leak is legit, so if it's not from AT&T, it could be from a close partner of AT&T?