AT&T says data from around 109 million US customer accounts illegally downloaded