AT&T Waits a Month to Notify Customers of Data Breach