AT&T says personal customer info taken in security breach by smartphone unlocking service