More than 1 million T-Mobile customers exposed by breach