The vulnerability, which AT&T says it has fixed, only affected iPad users who signed up for AT&T's "3G" wireless Internet service.
It involved an insecure way that AT&T's website would prompt iPad users when they tried to log into their AT&T accounts.
The hacker group that claims to have discovered the weakness - the group calls itself Goatse Security - said it was able to trick AT&T's site into coughing up more than 114,000 e-mail addresses, including those apparently of famous media personalities and important government officials.
