 because obviously AT&T has control over the security of their own systems, but not necessarily of third-party services. And what's really annoying about this, regarding these giant firms that are entrusted with so much of our personal data, is that we keep seeing these kinds of incidents over and over again, and there virtually never seem to be genuine consequences for the executives of these companies. So there doesn't really seem to be much incentive for these execs to spend the money and time