About The AT&T Data Breach Lawsuit And Settlement
In 2024, telecommunications corporation AT&T found itself at the center of claims of two massive data breaches. The security breaks allegedly compromised the personal data of millions of customers, resulting in a class action lawsuit.
Plaintiffs claimed that AT&T was responsible for the data breaches by failing to adequately protect consumer data. According to an AT&T spokesperson, the company denies culpability for any “criminal actions” but has agreed to a $177 million settlement “to avoid the expense and uncertainty of protracted litigation.”
All claims must be received by November 18, 2025, to be considered. Learn about the lawsuit, if you qualify, and how to make a claim today.
2024 AT&T Data Breaches
The AT&T lawsuit and settlement are associated with two 2024 data breaches. AT&T announced the first data breach on March 30, 2024, allegedly about two weeks after it occurred. Hackers reportedly accessed data from 2019 during the breach, affecting approximately 7.6 million AT&T customers and 65.4 million former customers.
According to the lawsuit, the following personal data may have been accessed during the March breach:
- Customer names
- Birthdates
- Social security numbers
- Addresses
- Email addresses
- Phone numbers
- Account passcodes
The company announced another data breach on July 12, 2024, which reportedly affected “nearly all” customers who used AT&T’s services between May 1, 2022, and October 31, 2022. Some 2023 customer data was also allegedly compromised. In total, approximately 109 million customer accounts were stated to have been accessed during the breach.
The following personal information is said to have been harvested:
- Phone numbers (those owned by current and former customers and those they interacted with)
- Telephone interaction information
- Aggregate call duration data
- Cell site identification numbers, in a small number of cases
Qualifying For The AT&T Data Breach Settlement
According to the official AT&T settlement page, class members include individuals who meet a few requirements:
- You must be a person in the United States, and
- Your information must have been included in the March 30, 2024, data breach, and/or
- You must have been an account owner or line or end user whose information was affected during the July 12, 2024, data breach.
To make a claim online, individuals must provide a Class Member ID, which can be found in the email that class members should have received from [email protected].
Those who did not receive an emailed notice but believe they qualify for the AT&T settlement can contact the settlement administrator at (833) 890-4930 or write to:
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
Class members should submit a claim form on the official settlement website before the deadline of November 18, 2025.
Documentation showing losses that are “fairly traceable” to either data breach is required when making a claim.
How Much Can Class Members Receive?
The $177 million AT&T data breach consists of a $149 million fund for the March incident and a $28 million fund for the July incident. The settlement is scheduled for a final approval hearing on December 3, 2025. Pending final approval, eligible claimants may be able to receive a portion of the net settlement fund that remains after attorneys' fees, administrative costs, and other expenses are taken out.
Class members who qualify for the March data breach payout, titled “AT&T 1 Settlement Class,” can choose between two payout options:
- A cash payment of up to $5,000 for documented losses that occurred on or after 2019, or
- A tiered cash payment (a pro rata—or equal—share of the AT&T 1 Settlement Class fund), which is divided into two groups:
- Tier 1: For class members whose social security numbers were accessed.
- Tier 2: For class members whose social security numbers were not accessed.
Due to the highly private nature of social security numbers, Tier 1 payouts are reportedly planned to be five times greater than Tier 2 payouts.
Those who qualify for the July data breach payout, labeled “AT&T 2 Settlement Class,” can choose from:
- A cash payment of up to $2,500 for documented losses occurring on or following April 14, 2024, or
- A pro rata share of the AT&T 2 net settlement fund.
Payouts for direct losses will be made first, followed by pro rata payouts, which will be distributed from the remaining settlement funds.
Class members affected by both 2024 data breaches can claim up to $7,500, provided they file two separate claims and provide proof of each unique documented loss. Payouts are subject to change and depend on which data breach compromised your information, what data was accessed, and more.
Add Comment