$177M AT&T data breach class action settlement

AT&T has agreed to pay $177 million to resolve claims surrounding two data breaches that occurred in March and July 2024.

The AT&T settlement benefits individuals whose personal information was compromised in the first AT&T data breach announced on March 30, 2024, or the second data breach announced on July 12, 2024.

AT&T is a telecommunications company that provides internet, phone and television services to millions of consumers. In March and July 2024, AT&T announced two separate data breaches that compromised sensitive consumer information.

The first breach, announced on March 30, 2024, allegedly compromised names, addresses, phone numbers, email addresses, birth dates, account passcodes, billing account numbers and Social Security numbers.

The second breach, announced on July 12, 2024, allegedly compromised current and former customer phone numbers, the phone numbers with which those customers interacted, counts of those interactions, aggregate call durations and, for a small number of individuals, one or more cell site identification numbers associated with the interactions.

AT&T customers took legal action against the company in the wake of these data breaches, arguing the company failed to protect their sensitive information from cybercriminals. The data breach class action lawsuit claims AT&T could have prevented the data breaches through reasonable cybersecurity measures.

The telecommunications giant has not admitted any wrongdoing, but agreed to pay this $177 million settlement to resolve the allegations. The settlement includes a $149 million fund to resolve the first data breach and a $28 million fund to resolve the second data breach.

Under the terms of the AT&T data breach settlement, class members can receive a cash payment based on the type of information they had compromised in the data breaches.

Class members whose information was compromised in the first data breach can receive either a documented loss cash payment of up to $5,000 or a tier cash payment. Tier 1 cash payments will be five times larger than Tier 2 payments. Exact payment amounts will vary depending on the number of claims filed with the settlement.

Class members whose information was compromised in the second data breach can receive a documented loss cash payment of up to $2,500 or a tier 3 cash payment. As with the first data breach payments, exact payment amounts will vary depending on the number of claims filed with the settlement.

Class members who had their information compromised in both data breaches can receive a documented loss cash payment for each breach.

The deadline for exclusion and objection is Oct. 17, 2025.

The final approval hearing for the AT&T data breach settlement is scheduled for Dec. 3, 2025.

To receive settlement benefits, class members must submit a valid claim form by Nov. 18, 2025.

Who’s Eligible

For the AT&T 1 settlement class, individuals in the United States whose data elements were included in the AT&T 1 data incident that was announced on March 30, 2024. AT&T 1 data elements include some combination of names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers and Social Security numbers.

For the AT&T 2 settlement class, AT&T account owner or line or end user whose AT&T 2 data elements were involved in the AT&T 2 data incident that was announced on or about July 12, 2024. AT&T 2 data elements mean current and former customer phone numbers, the phone numbers with which those customers interacted, counts of those interactions, aggregate call durations and, for a small number of individuals, one or more cell site identification numbers associated with the interactions.

Potential Award

For the AT&T 1 settlement class, up to $5,000 for documented losses or a tier cash payment. For the AT&T 2 settlement class, up to $2,500 for documented losses or a tier cash payment.

Proof of Purchase

For both the AT&T 1 and AT&T 2 documented loss cash payments, class members must submit documentation that is not self-prepared by the claimant, such as receipts, that supports the losses.

Self-prepared documents, such as handwritten receipts, personal accountings, statements, declarations or affidavits, are not sufficient on their own to qualify for reimbursement. However, these documents can be considered to add clarity or to support other submitted documentation.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

11/18/2025

Case Name

In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E, in the United States District Court for the Northern District of Texas

Final Hearing

12/03/2025

Settlement Website

TelecomDataSettlement.com

Claims Administrator

AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
833-890-4930

Class Counsel

Mark Lanier
LANIER LAW FIRM

Chris Seeger
Shauna Itri
SEEGER WEISS LLP

Jeff Ostrow
KOPELOWITZ OSTROW P.A.

Jason Rathod
MIGLIACCIO & RATHOD LLP

Defense Counsel

Gilbert Keteltas
Lisa Ghannoum
BAKER HOSTETLER LLP

Michael McTigue Jr.
Meredith Slawe
SKADDEN, ARPS, SLATE, MEAGHER & FLOM LLP