 would likely have been included in the breach as well because those records will normally always include the numbers from both ends of the communications. And guess what? AT&T apparently went ahead and paid a ransom of approaching $400,000 to get the data deleted, so they made it an attack that paid off handsomely. Now, one might ask, why is AT&T using third-party services for this sensitive customer information rather than dealing with it themselves?