AT&T is notifying customers of a Customer Proprietary Network Information compromise, exposing years-old upgrade details.