AT&T says it has begun notifying millions of customers about the theft of personal data recently discovered online