A third-party breach in 2023 that led to the exposure of data from 8.9 million AT&T customers has resulted in a $13 million settlement with the FCC.