AT&T resolves issue that would allow account takeover through ZIP code and phone number
The issue allowed security researcher Joseph Harris to effectively merge his own account with anyone else’s, giving him the ability to update that account’s password and take control of it.