I found my own SSN and many friends in the leak. It's clear the leak is legit, so if it's not from AT&T, it could be from a close partner of AT&T?