at the start of AT&T's breach announcement email, there is an invisible (display: none;) blurb about "Keeping your personal information secure", causing email clients to render that as the preview
the body of the email neglects to mention that SSN, DOB, passcodes, & contact info were exposed