re: AT&T notifies users of data breach and resets millions of passcodes

My GF got an alert from her CC Company that they found her info from this ATT data breach on the dark web. This feature hadn't found anything before on her info, but this one has her name old address, phone#, DOB, and SS# so those last 2 are freaking her out. (deservingly)

Though the SS# on the alert is just showing the last 4 digits "***-**-1234," but I found an article that says that the data breach also looks to have included the decoding file so still an issue. Also, saw where ATT seems to pointing their finger to some 3rd Party they work with, so wonder if the "who" can be asked or figured out.

Obviously looking into options, but trying to get some info before calling ATT to see what they offer as they said in the email they sent her that they will pay for fraud services.

Anyone look into and work with ATT on this yet?