Multiple class actions filed over AT&T data breach

AT&T data breach class action lawsuits overview: 

• Who: At least nine class action lawsuits have been filed against AT&T Inc. in the wake of a report that the information of more than 70 million of its current and former customers was leaked online. 
• Why: Consumers argue AT&T failed to properly safeguard and secure their information by failing to implement adequate security measures that could have prevented the data breach.
• Where: The class action lawsuits were all filed in Texas federal court. 

Multiple class action lawsuits have been filed against AT&T following reports that more than 70 million current and former customers had their information leaked online as a result of a data breach that appears to be from 2019. 

Plaintiffs in the lawsuits claim AT&T failed to properly safeguard and secure the information of its customers during the data breach, which the company previously addressed in 2021 while maintaining that any customer information did not come from its systems. 

The hacker behind the data breach released a limited amount of data at the time of the incident, but has now leaked the information — including names, birthdates and Social Security numbers, among other things — of around 73 million current and former AT&T customers. 

The plaintiffs claim AT&T failed to adequately implement security measures that could have prevented a cyberattack, despite having a duty to do so by being entrusted with their customers’ personally identifiable information (PII). 

“Defendant had obligations created by contract, industry standards, common law, and its own promises and representations to keep Plaintiff’s and Class Members’ PII confidential and to protect it from unauthorized access and disclosure,” one of the AT&T class actions says. 

Customers affected by AT&T data breach at risk of identity theft, other harms, class actions claim

The plaintiffs in the lawsuits claim AT&T waited to notify them about the data breach — with some arguing the company waited approximately five years. They say this has put them at risk of identity theft and various other forms of personal, social and financial harm. 

“As a result of Defendant’s failures and the Data Breach, Plaintiffs and Class Members’ identities are now at a current and substantial imminent and ongoing risk of identity theft and shall remain at risk for the rest of their lives,” one of the AT&T class actions says. 

The consumers want to represent nationwide classes of current and former AT&T customers whose PII was compromised as a result of the data breach, with some singling out individuals who were notified about the incident. One also wants to represent a California subclass. 

The class action lawsuits broadly claim AT&T is guilty of negligence, unjust enrichment and breach of contract, with one also bringing claims under California’s Unfair Competition Law and Consumer Privacy Act.  

The plaintiffs all demand a jury trial and are requesting declaratory and injunctive relief along with various damages for themselves and their class members. 

In other data breach news, a consumer filed a class action lawsuit against WellNow Urgent Care and its parent company The Aspen Group in March over claims they failed to properly secure patient data during a data breach in April 2023. 

Were you affected by the AT&T data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Ally Bank data breach class action dismissed
• WellNow class action alleges urgent care data breach harmed patients
• Roku data breach impacts 15,000+ customers
• Russian data breach of Microsoft continues