> says that leaked information "may have included full name, email address, mailing address, phone number, social security number, date of birth, AT&T account number and passcode."<p>I fully agree with all the other comments out there which say that companies don't take privacy seriously enough and that there aren't enough real penalties when this data is leaked.<p>That said, are we ever going to stop pretending that this data is "private" anymore? That is, I'm pretty sure that everyone who has ever held a digital account has had their name, phone, email, address, and more importantly birthdate and SSN leaked numerous times already. They're simply no longer private as a matter of fact. But this set of data is essentially all that is required in most places to, say, open a bank account and pass KYC restrictions. Why? Why are we still pretending that this information isn't available on pretty much everyone <i>to</i> pretty much anyone that has smallest amount of technical knowledge?<p>I agree with the other comment about always freezing your credit scores, which makes it much more difficult for others to fraudulently open accounts in your name. Also note the entire financial system <i>knows</i> this, but they know that most of the cost is born by the victim (it's been repeated a million times how "identity theft" is essentially a made up term banks came up with for shifting the blame onto the victim instead of themselves for not having good identity verification procedures in the first place), which is why they don't recommend it by default and more broadly.