AT&T Data Breach Settlement: What Happened?
AT&T has agreed to pay $177 million to settle class-action lawsuits tied to two major data breaches in 2024. The telecom giant, one of the largest in the U.S., faced backlash after sensitive information of millions of customers was compromised and surfaced online.
The first incident was reported on March 30, 2024, when AT&T revealed that it was investigating a leak that exposed Social Security numbers and other data of 73 million current and former customers. The compromised dataset, which contained information up to 2019, was discovered on the dark web.
Four months later, in July 2024, AT&T disclosed another breach involving an “illegal download” on a third-party cloud platform. This second breach affected “nearly all” AT&T cellular subscribers and those on partner networks, leaking telephone numbers between May and October 2022.
Combined, these incidents triggered widespread lawsuits, culminating in the AT&T data breach settlement.
How Much Is the AT&T Data Breach Settlement Worth?
The settlement is divided into two parts:
-
$149 million for the March breach
-
$28 million for the July breach
Together, the settlement totals $177 million.
AT&T continues to deny wrongdoing but agreed to the settlement to “avoid the expense and uncertainty of prolonged litigation.” The company emphasized its commitment to protecting customer data and rebuilding trust.
Who Is Eligible to File a Claim?
Current and former AT&T customers whose data was compromised in either—or both—breaches are eligible. Notifications are being sent via email by Kroll Settlement Administration, the company managing claims.
The deadline to file a claim is November 18, 2025, while the final approval hearing is scheduled for December 3, 2025. Payouts will begin once court approval is finalized and all appeals are resolved.
How Much Can Customers Claim?
Impacted customers can submit claims for reimbursement if they can provide documentation of losses directly tied to the breaches.
-
March Breach (2019 and later losses): Up to $5,000
-
July Breach (losses after April 14, 2024): Up to $2,500
-
Both Breaches: Customers could receive up to $7,500, provided each claim is supported by unique documentation
Alternatively, customers can file for tier cash payments. Those whose Social Security numbers were exposed in the March breach may qualify for higher payments (five times the base rate). Meanwhile, individuals affected by the July breach will receive an equal share of remaining funds.
It is important to note that final payouts may vary depending on the number of valid claims submitted.
AT&T’s Response to the Settlement
AT&T has repeatedly stated that it was not directly responsible for the breaches, labeling them as criminal acts by third parties. However, the company agreed to settle to avoid drawn-out litigation.
In its statement, AT&T stressed its ongoing efforts to safeguard customer information:
“We remain committed to protecting our customers’ data and ensuring their continued trust in us.”
The settlement is expected to receive final approval by the end of 2025.
Final Takeaway
The AT&T data breach settlement offers customers financial relief after two large-scale leaks exposed personal information. If you were an AT&T customer affected by these breaches, you may be eligible for compensation—up to $7,500 depending on your documented losses.
For more insights into corporate responsibility and consumer protection, read expert analysis on IMPAAKT, featured in the top business magazine.