“The preliminary result from our investigation indicates that the bad actor(s) obtained data from this API for approximately 37 million current postpaid and prepaid customer accounts, though many of these accounts did not include the full data set,” the SEC filing dated Jan. 19 says.
https://abcnews.go.com/US/mobile-breached-hackers-37-million-customers-impacted/story?id=96557559