at&t data breach lawsuit eligibility