The clock is ticking for AT&T customers hoping to claim part of a $177 million settlement following two major data breaches in 2024. With less than two months left before the filing deadline, eligible individuals could receive up to $7,500 in compensation. Here’s what happened, who qualifies, and how to file your claim.
What Happened in the AT&T Data Breaches?
The first breach was disclosed on March 30, 2024, by the Dallas-based telecommunications giant. Roughly 73 million accounts were affected—7.6 million current customers and 65.4 million former ones.
Information found on the dark web included names, addresses, birthdates, phone numbers, passcodes, and even Social Security numbers linked to AT&T accounts.
A Second Breach Shook Confidence Further
Just a few months later, on July 12, 2024, AT&T announced another cybersecurity incident. This time, hackers allegedly accessed data stored on a third-party cloud platform.
According to AT&T, the files contained records of calls and texts for nearly all of its wireless customers between May and October 2022—though the actual content of communications wasn’t exposed.
Why Authorities Delayed Public Disclosure
The Federal Bureau of Investigation and the Department of Justice supported delaying the public announcement of both breaches. They cited potential risks to national security and public safety as key reasons.
Throughout the process, AT&T collaborated with federal investigators, sharing threat intelligence and working to strengthen its incident response and data protection systems.
From Outrage to Lawsuits: How Legal Action Began
After the breaches came to light, a wave of state and federal lawsuits followed, accusing AT&T of failing to safeguard sensitive customer information.
These cases were eventually consolidated into two separate class-action lawsuits. The company has denied wrongdoing but chose to settle to avoid the cost and uncertainty of extended litigation.
Inside the $177 Million Settlement
The total settlement amount stands at $177 million, divided into two parts: $149 million for the first case and $28 million for the second.
The U.S. District Court for the Northern District of Texas must give final approval before any payments are made. A hearing is scheduled for December 3, 2025, to confirm the agreement.
Who Qualifies for Compensation?
Eligibility depends on which of the two data breaches affected you. AT&T customers—both current and former—whose personal information was compromised can submit claims.
Notifications are being sent by Kroll Settlement Administration, the official claims administrator. If you received an email from attsettlement@e.emailksa.com, you may be eligible to participate.
Payouts for the March 2024 Breach
Customers affected by the first data breach can claim up to $5,000 in documented financial losses. This option requires proof, such as receipts or statements showing identity theft costs.
Those who can’t provide proof may still apply for smaller payments through a tiered system, with higher tiers available to individuals whose Social Security numbers were exposed.
Payouts for the July 2024 Breach
Those impacted by the second breach, announced in July, can claim up to $2,500 for verified financial damages. The settlement’s website provides detailed instructions and documentation requirements.
Because the July breach primarily involved call and text records rather than personal identifiers, fewer customers are expected to qualify for the maximum payout.
How to File a Claim
Filing a claim is straightforward. You can visit the official Kroll Settlement Administration website and complete an online form, or submit paperwork by mail.
Claims opened on August 4, 2025, following a federal court ruling. The deadline to file is November 18, 2025, and anyone choosing to opt out must do so by October 17, 2025.
When to Expect Payments
If the Texas court grants final approval on December 3, settlement payouts could begin in early 2026. After submitting a claim, you should receive a confirmation code and notice ID.
If you don’t, contact Kroll at (833) 890-4930. Those who file claims agree to waive their right to sue AT&T individually over the breaches.
What AT&T Says About the Breaches
AT&T has consistently denied being at fault, calling the cyberattacks “criminal acts” by third parties. In a statement, the company said the settlement was a way to “avoid the expense and uncertainty of protracted litigation.” AT&T emphasized its ongoing commitment to improving data security and protecting customer privacy across all platforms.
Keeping Your Information Safe
These breaches serve as a stark reminder of the growing risks of data exposure in a connected world. Experts recommend customers monitor credit reports, enable two-factor authentication, and update passwords regularly.
Even if your data wasn’t directly affected, taking proactive steps can help prevent future identity theft or financial fraud.
What Comes Next
While the settlement aims to bring closure to one of the largest telecom data breaches in recent memory, its implications extend beyond AT&T. The case underscores the need for stronger cybersecurity practices across the industry.
Customers who qualify should act quickly before the November deadline to secure the compensation they’re entitled to.
FAQs
What is the AT&T settlement about?
AT&T is offering a $177 million settlement for customers affected by two data breaches in 2024. Eligible customers can file claims for cash payments of up to $7,500.
When were the data breaches announced?
The data breaches were announced in March and July of 2024.
How much can I claim from the settlement?
Eligible customers can file claims for up to $7,500 in cash payments as part of the settlement.
Why were lawsuits filed?
Lawsuits were filed in response to the data breaches, which compromised customer information.
