If you’re a current AT&T customer or were one in the past, this development is significant. AT&T has agreed to a $177 million settlement following two massive data breaches, and qualifying individuals may receive up to $7,500 in compensation.
But time is short—the deadline to file a claim is fast approaching. This article explains how the breaches happened, who is eligible, and how to file your claim.
The Timeline of the AT&T Data Breaches
March 2024 Breach
In March 2024, AT&T revealed that hackers had exposed data for roughly 73 million customers—including about 7.6 million active users and 65 million former users. The stolen information surfaced on the dark web and included:
- Home addresses
- Social Security numbers (SSNs)
- Dates of birth
- Passcodes
- Billing information
- Phone numbers
The scale of this leak raised serious concerns about how safe personal data really was.
July 2024 Breach
Just months later, in July 2024, AT&T disclosed a second compromise. This time hackers accessed a third-party cloud system tied to AT&T and downloaded customer call and text metadata across the network—including partners’ networks.
AT&T claimed that while metadata was exposed, no actual content of calls or texts, nor SSNs or birthdates, were compromised. Still, the reach of this breach was so large that federal and governmental agencies became involved.
Federal Investigation & National Security Implications
Following these incidents, U.S. authorities such as the FBI and the Department of Justice launched thorough investigations in conjunction with AT&T. Details were kept mostly confidential to prevent potential threats to national security.
In effect, the breach wasn’t viewed merely as a corporate failure—it carried implications for the broader security infrastructure of the country.
Legal Action and the Settlements
After both breaches, numerous lawsuits flooded in across the country. These were ultimately consolidated into two major class-action suits known as the AT&T 1 Settlement and AT&T 2 Settlement, filed in state and federal court, respectively.
Although AT&T has not admitted wrongdoing, it opted for a settlement to avoid protracted litigation.
Settlement Funds Breakdown
- March 2024 (AT&T 1): $149 million
- July 2024 (AT&T 2): $28 million
Together, they sum to $177 million. The court’s final approval is expected at a hearing on December 3, 2025. If approved, disbursements will likely begin early 2026.
Who Qualifies and How Much Can You Claim?
For the March 2024 Breach (AT&T 1)
You have two paths to compensation:
- Document-Based Claim: You may claim up to $5,000 if you can show concrete financial harm (e.g., identity theft, fraudulent bank or credit activity).
- Tiered Payment Option: Even without proof of financial harm, you may opt into a tiered payout structure:
- Tier 1: For those whose SSN was exposed, payouts are five times greater than Tier 2
- Tier 2: For exposures without SSNs
For the July 2024 Breach (AT&T 2)
Eligible individuals can apply for up to $2,500 if they can demonstrate loss tied to the breach. Even without proof, one might still qualify for a reduced tiered or prorated payment.
Impact of Dual Exposure
If you were affected by both breaches, you may file under both settlement classes—potentially giving you combined compensation up to $7,500.
How to File Your Claim
Online or By Mail
The claims window opened on August 4, 2025. Notice of eligibility (including a Claim ID and Notice Number) was sent to eligible parties via email.
You may file your claim:
- Online via the Kroll Settlement Administration (KSA) portal
- By mail, using a printable version of the claim form
Documents You’ll Need
- Your contact details
- AT&T account or billing information
- Government-issued identification (such as driver’s license)
- Proof of financial harm, if applicable (e.g., bank or credit card statements)
Key Dates
- Claim filing deadline: November 18, 2025
- To opt out (if you want to preserve independent lawsuits): October 17, 2025
- Court hearing: December 3, 2025
Opting out means you retain the right to sue AT&T personally—but you cannot later file a claim under the class settlement.
When Will Payments Be Made?
If the settlement receives court approval, distributions should begin by December 2025 or early 2026. Payments will be delivered via bank transfer or mailed check, depending on available information. The exact payout will depend on total claims filed and administrative costs.
AT&T’s Stance & Response
AT&T has stated that the settlement is not an admission of guilt. The company claims its motivation was to avoid long, costly legal proceedings.
Still, AT&T affirmed its commitment to safeguarding customer data and has initiated steps to enhance its cybersecurity protocols.
Tips and Precautions
- Watch your inbox: AT&T or KSA will send eligibility emails with a Claim ID and Notice Number
- Stay cautious of phishing: Only submit claims via official AT&T or KSA sites
- Don’t miss the deadlines: Claims after November 18, 2025 won’t be accepted
- Monitor financial accounts: Be on the lookout for suspicious activity stemming from data exposure
The $177 million AT&T settlement marks a noteworthy win for consumers in the fight against large-scale cybersecurity failures. If you are or were an AT&T customer affected by either breach, you may be eligible for compensation—up to $7,500—provided you act before the deadline. Don’t delay: submit your claim and safeguard your rights.
FAQs
Can I file for both the March and July 2024 breaches?
Yes. If your data was compromised in both incidents, you may submit separate claims under each settlement, potentially combining your compensation up to $7,500.
What happens if I opt out?
Opting out before October 17, 2025 allows you to retain the right to sue AT&T individually. But it also disqualifies you from claiming under the class settlement.
Do I need proof of harm to file a claim?
Not necessarily. For the March 2024 breach, you can choose a Tiered Payment even without evidence of loss. For the July 2024 breach, you may receive a reduced prorated or tiered payment if harm can’t be demonstrated.