AT&T INC.

The breach was in a Snowflake data warehouse, not AT&T's network, reached with stolen passwords because no second factor stood in the way, and it held the call and text records of nearly every AT&T customer. Not the words, just who contacted whom, how long, and roughly where: the shape of 110 million lives. AT&T reportedly paid about $370,000 to have the file deleted, which assumes a copy is a thing you can take back.