Sure, but that doesn't excuse the thief. In a 'just' world the thief would go to jail and AT&T would suffer fines, private lawsuits. The people responsible for the lack of security would also be fired.