The way AT&T's whole email is worded seems as though AT&T went to great lengths to avoid clarifying if your particular email was stolen.