I just received a text message supposedly from AT&T saying to "please reply with your billing zip code". it was from a number like 1001010101 or something like that. I deleted it though.
AT&T never asks for personal information via a text message.
They will either call you directly or text you with a phone number to call them back at (which can be easily verified as legit or not) if they need to contact you.