AT&T says it has taken "additional cybersecurity measures" in response to the incident, including closing off the point of unlawful access.