Sonehow, I wonder if this might be more ass-covering than anytbing else. Perhaps to report to the regulator that they've done all they can. Or maybe, if they ever track down the people responsible fot the hack, you can imagine AT&T suing for breach of contract!