AT&T breach victims need to take these 3 steps right now