 But AT&T talked them down to the amount which it paid. Once the ransom was paid, the hacker then provided a video to prove they had deleted the data according to the terms of their agreement. Before the AT&T breach became known, it was reported that Ticketmaster and Santander Bank were also compromised via the stolen login credentials of a certain third-party cloud storage company called Snowflake, which may have compromised up to 165 other customers' login credentials.