AT&T hack exposes 19,000 identities