AT&T is paying $177 million to settle class action lawsuits stemming from two massive data breaches that exposed the personal information of millions of current and former customers. The telecommunications giant faces legal consequences for the 2019 breach affecting 73 million people and the 2024 breach impacting approximately 109 million customers through a Snowflake data warehouse attack. With the claims process now open, eligible individuals have until November 18, 2025, to file for compensation.
Understanding the AT&T Data Breaches
The settlement addresses two separate security incidents that compromised customer data. The 2019 AT&T data breach exposed sensitive personal information including Social Security numbers, birth dates, and legal names of 7.6 million current customers and 65.4 million former account holders. AT&T initially denied this breach occurred but acknowledged it in March 2024 after customer data appeared on the dark web.
The 2024 AT&T data breach involved hackers accessing phone records from nearly all AT&T’s US customers through the company’s cloud-based Snowflake data warehouse. This incident affected approximately 109 million people and was claimed by associates of the hacker group ShinyHunters, who were later arrested for their involvement.
Who Is Eligible for the AT&T Settlement?
Eligibility depends on which breach affected your information. The settlement divides claimants into two primary categories:
- AT&T 1 Data Incident Class: Current or former customers whose personal data was compromised in the 2019 breach
- AT&T 2 Data Incident Class: Customers whose phone records were exposed in the 2024 Snowflake breach
Individuals affected by both incidents can file claims in each category. The settlement FAQ page provides detailed eligibility criteria and helps determine which class action categories apply to your situation.
How Much Compensation Can You Receive?
The $177 million settlement allocates different amounts for each breach category. The 2019 breach settlement totals $149 million, while the 2024 breach settlement amounts to $28 million. Actual payment amounts will depend on:
- The number of valid claims submitted
- Which breach category you qualify for
- Whether you experienced both incidents
- Documented losses from the data exposure
While exact individual payout amounts haven’t been determined, eligible claimants could receive significant compensation once the settlement receives final approval from the court.
How to File Your AT&T Data Breach Claim
Filing a claim is straightforward through the official settlement website. Follow these steps:
- Visit telecomdatasettlement.com, the official claims portal
- Determine which claim forms you need based on your eligibility
- Complete the appropriate forms:
- AT&T 1 Claim Form for the 2019 breach
- AT&T 2 Claim Form for the 2024 breach
- Overlap Claim Form if affected by both incidents
- Submit your claim before the November 18, 2025 deadline
Kroll Settlement Administration is managing the claims process and will verify submissions before distributing payments after final court approval.
Timeline and Important Deadlines
The settlement process follows a specific timeline that claimants should note:
- June 20, 2024: Preliminary approval granted by US District Judge Ada E. Brown
- August 4, 2024: Claims process officially opened
- November 18, 2025: Final deadline to submit claims
- Early 2026: Expected distribution of settlement payments
For additional coverage of AT&T’s response to these breaches, including their official statement about the dark web data release, check our related analysis of corporate data breach responses.
Protecting Your Personal Data Moving Forward
These incidents highlight the importance of protecting personal information in an increasingly digital world. If you were affected by the AT&T breaches, consider taking these protective measures:
- Monitor your credit reports for suspicious activity
- Enable two-factor authentication on all accounts
- Use unique passwords for different services
- Consider credit monitoring services
- Remain vigilant against phishing attempts using your exposed data
For more security tips, read our additional coverage on password security best practices following major data breaches.
References
- AT&T Password Reset Coverage
- AT&T Official Statement on Dark Web Data
- AT&T 2 Data Incident Claim Form
- Wikipedia: Hacker Definition
- AT&T Settlement FAQ Page
- Wikipedia: Legal Settlement Explanation
- Snowflake Security Analysis
- AT&T Overlap Claim Form
- Wikipedia: Personal Data Protection
- AT&T 1 Data Incident Claim Form