Social Security numbers and passcodes for about 7.6 million current account holders and 65.4 million former account holders were posted on the “dark web,” AT&T said.