The deadline for filing a claim in the AT&T data breach lawsuit is less than two months away. The $177 million legal settlement could award eligible customers up to $7,500 in compensation.
Here’s what to know about the settlement and how to file a claim.
When were the AT&T data breaches?
On March 30, 2024, the Dallas-based telecommunications company announced its first data breach, affecting about 73 million accounts — 7.6 million current customers and 65.4 million former ones. The leaked information, found in a dark web dataset, included:
- addresses
- Social Security numbers
- birthdates
- passcodes
- billing numbers
- phone numbers
Another data breach was announced on July 12, 2024, after hackers had allegedly downloaded the data from a third-party cloud platform. This incident involved “nearly all” cellular customers and included records of calls and texts.
“Based on our investigation, the compromised data includes files containing AT&T records of calls and texts of nearly all of AT&T’s cellular customers, customers of mobile virtual network operators using AT&T’s wireless network, as well as AT&T’s landline customers who interacted with those cellular numbers between May 1, 2022 – October 31, 2022,” the company said in the news release.
AT&T reported the hacked data did not “contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information.” The data aren’t believed to be available publicly.
Federal agencies supported the decision to delay the announcements of the breaches, citing the assessment of broader risks.
“In assessing the nature of the breach, all parties discussed a potential delay to public reporting…due to potential risks to national security and/or public safety,” the FBI said in a statement. “AT&T, FBI, and DOJ worked collaboratively through the first and second delay process, all while sharing key threat intelligence to bolster FBI investigative equities and to assist AT&T’s incident response work.”
The data breaches prompted a flurry of state and federal lawsuits, which were then grouped into two class-action cases.
How much is AT&T’s settlement in the data breach lawsuit?
| Settlement Amount | Eligible Claim Amount | Data Breach Announced | Lawsuits Filed |
|---|---|---|---|
| $177 million | Up to $7,500 | March and July 2024 | Yes |
AT&T agreed to pay $177 million in total, which includes $149 million for the first settlement case and $28 million for the second. Before compensation can be distributed, however, the U.S. District Court for the Northern District of Texas must approve it in a final hearing on Dec. 3.
Who can file a claim for the AT&T settlement? How much is compensation?
The process for filing a claim and the maximum compensation amount depend on which data breach a customer was impacted by. Here’s a breakdown of what the settlement website says.
Data breach announced March 2024: AT&T 1 Settlement Class
Those affected by the first data breach can claim up to $5,000 by submitting materials for the documented loss cash payment option.
Alternatively, individuals can choose a tiered cash payment option. This does not require proof of financial loss, though it involves a smaller share of the settlement. Tier 1 covers those whose Social Security numbers were included in the data breach, and the payments for these will be five times higher than those in Tier 2, whose Social Security numbers were not compromised.
Data breach announced July 2024: AT&T 2 Settlement Class
Customers who can provide documented proof of financial loss in the second data breach can claim up to $2,500.
How can I file a claim for the AT&T data breach settlement?
Claims for both AT&T data breaches opened on Aug. 4 following a ruling by a federal judge. Eligible customers are being notified via email from Kroll Settlement Administration at attsettlement@e.emailksa.com. Anyone with questions about their eligibility can call KSA at (833) 890-4930.
Claims can be filed on the KSA website, where further details are also available.
The deadline to file a claim online or via mail is Nov. 18. Affected individuals who choose to sue the company independently must opt out by Oct. 17. Those who choose to file a claim give up their right to sue AT&T as individuals.
Individuals who submit a claim but do not receive a confirmation code and notice ID can contact the KSA at 833-890-4930.
If the Texas court approves the settlement on Dec. 3, payouts are likely to begin in early 2026.
Am I eligible for a claim?
AT&T customers whose data was involved in either breach, or both, will be eligible. Customers eligible to file a claim will receive an email notice, according to the settlement website.
AT&T said Kroll Settlement Administration is notifying current and former customers.
How has AT&T responded?
AT&T said in a statement that it denies allegations from the lawsuits that it was responsible “for these criminal acts” from the data breach, but “agreed to this settlement to avoid the expense and uncertainty of protracted litigation.”
“We remain committed to protecting our customers’ data and ensuring their continued trust in us,” the company wrote.
In 2024, an AT&T spokesperson told CNN that the March breach had “no connection in any way” to the July announcement. AT&T said it expects the settlement will be approved by the end of the year.
FAQs
What is the AT&T settlement about?
AT&T is offering a $177 million settlement for customers affected by two data breaches in 2024. Eligible customers can file claims for cash payments of up to $7,500.
When were the data breaches announced?
The data breaches were announced in March and July of 2024.
How much can I claim from the settlement?
Eligible customers can file claims for up to $7,500 in cash payments as part of the settlement.
Why were lawsuits filed?
Lawsuits were filed in response to the data breaches, which compromised customer information.
