AT&T allowed theft of personal data of 280K subscribers in Mexico, Columbia, and Philippines