AT&T paid over $300K to a hacker to delete the files from a cloud service just because the hacker said there were no other copies. Why wouldn’t they copy the files first?
$300K is just loose change for AT&T, but I suspect it was paid purely to give them a veneer of deniability when this info is used in future identity theft. “Oh no, that couldn’t be from the breach of our customer data that we insecurely stored without MFA, because we have video proof those files were deleted.”
