Five things to know about the AT&T data breach