When a number generated by the hackers matched an actual ICC-ID, the authentication page log-in screen was returned to the hackers with the email address associated with the ICC-ID already populated on the log-in screen.
FORBES: AT&T Email: That Huge iPad Security Breach Was Caused By Bad People Called "Hackers"--Not AT&T