Reports have suggested that a rouge employee from within AT&T or FedEx may be collecting tracking numbers and selling them to thieves, similar to how people's information is sold on the dark web.