AT&T agreed to pay $177 million in total, which includes $149 million for the first settlement case and $28 million for the second. (Photo by Kevin Carter/Getty Images)
Kevin Carter/Getty Images
The deadline for filing a claim in the AT&T data breach lawsuit is a week away. The $177 million legal settlement could award eligible customers up to $7,500 in compensation.
Here’s what to know about the settlement and how to file a claim.
Article continues below this ad
When were the AT&T data breaches?
On March 30, 2024, the Dallas-based telecommunications company announced its first data breach, affecting about 73 million accounts — 7.6 million current customers and 65.4 million former ones. The leaked information, found in a dark web dataset, included:
- Addresses
- Social Security numbers
- Birthdates
- Passcodes
- Billing numbers
- Phone numbers
Another data breach was announced on July 12, 2024, after hackers had allegedly downloaded the data from a third-party cloud platform. This incident involved “nearly all” cellular customers and included records of calls and texts.
Article continues below this ad
“Based on our investigation, the compromised data includes files containing AT&T records of calls and texts of nearly all of AT&T’s cellular customers, customers of mobile virtual network operators using AT&T’s wireless network, as well as AT&T’s landline customers who interacted with those cellular numbers between May 1, 2022 – October 31, 2022,” the company said in the news release.
AT&T reported the hacked data did not “contain the content of calls or texts, personal information such as Social Security numbers, dates of birth, or other personally identifiable information.” The data aren’t believed to be available publicly.
Federal agencies supported the decision to delay the announcements of the breaches, citing the assessment of broader risks.
Article continues below this ad
“In assessing the nature of the breach, all parties discussed a potential delay to public reporting…due to potential risks to national security and/or public safety,” the FBI said in a statement. “AT&T, FBI, and DOJ worked collaboratively through the first and second delay process, all while sharing key threat intelligence to bolster FBI investigative equities and to assist AT&T’s incident response work.”
The data breaches prompted a flurry of state and federal lawsuits, which were then grouped into two class-action cases.
How much is AT&T’s settlement in the data breach lawsuit?
AT&T agreed to pay $177 million in total, which includes $149 million for the first settlement case and $28 million for the second. Before compensation can be distributed, however, the U.S. District Court for the Northern District of Texas must approve it in a final hearing on Dec. 3.
Article continues below this ad
In the meantime, affected customers are encouraged to file claims.
Who can file a claim for the AT&T settlement? How much is compensation?
The process for filing a claim and the maximum compensation amount depend on which data breach a customer was impacted by. Here’s a breakdown of what the settlement website says.
Those affected by the first data breach can claim up to $5,000 by submitting materials for the documented loss cash payment option.
Article continues below this ad
Alternatively, individuals can choose a tiered cash payment option. This does not require proof of financial loss, though it involves a smaller share of the settlement. Tier 1 covers those whose Social Security numbers were included in the data breach, and the payments for these will be five times higher than those in Tier 2, whose Social Security numbers were not compromised.
Customers who can provide documented proof of financial loss in the second data breach can claim up to $2,500.
The tiered cash option in this incident only includes Tier 3, in which claimants will receive a share of the settlement after administration costs and claims are distributed.
Those affected by both data breaches could receive up to $7,500 in compensation.
Article continues below this ad
How can I file a claim for the AT&T data breach settlement?
Claims for both AT&T data breaches opened on Aug. 4 following a ruling by a federal judge. Eligible customers are being notified via email from Kroll Settlement Administration at attsettlement@e.emailksa.com. Anyone with questions about their eligibility can call KSA at (833) 890-4930.
Claims can be filed on the KSA website, where further details are also available.
The deadline to file a claim online or via mail is Nov. 18. Affected individuals who choose to sue the company independently must opt out by Oct. 17. Those who choose to file a claim give up their right to sue AT&T as individuals.
Article continues below this ad
Individuals who submit a claim but do not receive a confirmation code and notice ID can contact the KSA at 833-890-4930.
If the Texas court approves the settlement on Dec. 3, payouts are likely to begin in early 2026.
