AT&T Data Breach Settlement 2025: How to Claim Up to $7,500 from $177M Class Action Lawsuit

In a landmark resolution, AT&T has agreed to a $177 million class action settlement to address two massive data breaches that exposed sensitive information of millions of customers in 2024. The settlement, preliminarily approved by a federal judge in Texas on June 20, 2025, offers current and former AT&T customers the chance to claim up to $7,500 in compensation for losses caused by the breaches. With the claim deadline set for November 18, 2025, here’s the complete story of the AT&T data breaches, who is eligible, how to file a claim, and what this means for affected customers. Stay informed with the latest updates at www.nriglobe.com.

The AT&T Data Breaches: What Happened?

AT&T, one of the largest telecommunications companies in the United States, faced significant backlash after two major data breaches in 2024 compromised the personal and communication data of millions of customers. These incidents led to a wave of lawsuits, culminating in the consolidated class action case, In Re: AT&T Inc. Customer Data Security Breach Litigation, MDL Docket No. 3:24-md-03114-E, overseen by the U.S. District Court for the Northern District of Texas.

Breach 1: March 2024 (AT&T 1 Data Incident)

Announced on March 30, 2024, the first breach involved a data set from 2019 that surfaced on the dark web, exposing sensitive personal information of approximately 7.6 million current AT&T account holders and 65.4 million former account holders—a total of 73 million affected individuals. The compromised data included:

• Names
• Addresses
• Telephone numbers
• Email addresses
• Dates of birth
• Account passcodes
• Billing account numbers
• Social Security numbers

The breach, initially reported by a hacker group called Shiny Hunters in 2021, was not confirmed by AT&T until April 2024. Investigations revealed that stolen passwords were easily decrypted, raising concerns about identity theft and fraud. AT&T reset account passcodes and faced allegations of failing to implement adequate cybersecurity measures to protect customer data.

Breach 2: July 2024 (AT&T 2 Data Incident)

The second breach, announced on July 12, 2024, was described as one of the largest private communications data breaches in history, affecting nearly all AT&T cellular customers—approximately 109 million accounts. Hackers illegally accessed and copied six months’ worth of call and text message records from 2022, stored on a third-party cloud platform, Snowflake. The exposed data included:

• Telephone numbers of current and former AT&T customers
• Telephone numbers of individuals they interacted with
• Counts of those interactions
• Aggregate call durations
• In some cases, cell site identification numbers

This breach, confirmed in April 2024, prompted swift action from law enforcement, leading to the arrest of two alleged hackers. AT&T clarified that customer names were not included in the stolen data, but the scale of the breach heightened concerns about privacy violations.

The $177 Million Settlement: Breaking It Down

Following multiple lawsuits filed in state and federal courts, AT&T agreed to a $177 million settlement to resolve allegations that it failed to protect customer data through reasonable cybersecurity measures. While AT&T denies any wrongdoing, stating it was not responsible for the criminal acts, the company opted for the settlement to avoid the costs and uncertainties of prolonged litigation. The settlement, administered by Kroll Settlement Administration, is divided into two funds:

• AT&T 1 Settlement Fund: $149 million to address claims related to the March 2024 (2019) breach.
• AT&T 2 Settlement Fund: $28 million to address claims related to the July 2024 (2022) breach.

A federal judge granted preliminary approval on June 20, 2025, with a final approval hearing scheduled for December 3, 2025. If approved, payments are expected to begin in early 2026, though appeals could delay distribution.

Who Is Eligible for the AT&T Settlement?

Current and former AT&T customers whose data was compromised in either or both breaches are eligible to file a claim. Here’s a breakdown of the eligibility criteria:

• AT&T 1 Settlement Class (March 2024 Breach): Includes individuals whose personally identifiable information (e.g., names, addresses, Social Security numbers, etc.) was exposed in the 2019 data leak, announced in March 2024. Approximately 73 million people are affected.
• AT&T 2 Settlement Class (July 2024 Breach): Includes AT&T account owners or users whose telephone-related data (e.g., call and text logs) was compromised in the 2022 incident, announced in July 2024. Approximately 109 million accounts are affected.
• Overlap Settlement Class: Customers affected by both breaches can file separate claims for each, potentially receiving up to $7,500 if they provide documentation for losses from both incidents.

Eligible customers may have received an email or postcard from attsettlement@e.emailksa.com with a class member ID and notice ID. If you haven’t received a notification but believe you were affected, you can verify your eligibility by visiting www.telecomdatasettlement.com or calling (833) 890-4930.

How Much Can You Claim?

The amount you can claim depends on the breach and the type of payout you seek. Documentation proving losses “fairly traceable” to the breaches is required for higher payouts. Here’s a detailed breakdown:

AT&T 1 Settlement (March 2024 Breach)

• Documented Loss Cash Payment: Up to $5,000 for losses incurred in 2019 or later, such as identity theft or fraud, with proof (e.g., receipts, credit monitoring costs, or police reports).
• Tier 1 Cash Payment: For customers whose Social Security numbers were exposed, a pro rata share of the $149 million fund, five times larger than Tier 2.
• Tier 2 Cash Payment: For customers whose other data (not Social Security numbers) was exposed, a pro rata share of the $149 million fund.

AT&T 2 Settlement (July 2024 Breach)

• Documented Loss Cash Payment: Up to $2,500 for losses incurred on or after April 14, 2024, with proof.
• Tier 3 Cash Payment: A pro rata share of the $28 million fund for those without documented losses, after administrative costs and attorney fees.

Overlap Claims

If you were affected by both breaches, you can file two separate claims, potentially receiving up to $7,500 ($5,000 + $2,500) for documented losses. However, you cannot use the same receipts for both claims. The final payout for pro rata shares depends on the number of valid claims and deductions for settlement administration, attorney fees, and service awards.

How to File a Claim

To claim your share of the settlement, follow these steps:

1. Visit the Settlement Website: Go to www.telecomdatasettlement.com and click “Submit Claim.”
2. Provide Identification: Enter your class member ID (found in the email or postcard from Kroll Settlement Administration), along with your email address, AT&T account number, or full name.
3. Submit Documentation: For documented loss payments, provide receipts or other evidence (e.g., credit monitoring subscriptions, fraud-related expenses) showing losses traceable to the breaches.
4. Choose Your Payout Option: Select either a documented loss payment or a pro rata share (Tier 1, Tier 2, or Tier 3).
5. File by the Deadline: Claims must be submitted online or postmarked by November 18, 2025. Mailed claims should be sent to:AT&T Data Incident Settlement c/o Kroll Settlement Administration LLC P.O. Box 5324 New York, NY 10150-5324

If you’re unsure about your eligibility or need your class member ID, contact Kroll Settlement Administration at (833) 890-4930 or use the contact form on the settlement website.

Key Dates to Remember

• August 4, 2025: Notification program began, with emails and postcards sent to affected customers.
• October 17, 2025: Notification program completion.
• November 18, 2025: Deadline to file claims, opt out, or object to the settlement.
• December 3, 2025: Final approval hearing in the U.S. District Court for the Northern District of Texas.
• Early 2026: Expected payout distribution, pending final approval and resolution of any appeals.

What If You Want to Sue AT&T Separately?

If you prefer to pursue an individual lawsuit against AT&T, you must opt out of the settlement by November 18, 2025. Opting out preserves your right to sue but excludes you from receiving any settlement payout. To opt out, submit a written request to the address above or through the settlement website. If you do nothing, you’ll be included in the settlement but forfeit your right to sue AT&T later for these breaches.

The Bigger Picture: Impact and Implications

The AT&T data breaches highlight the growing threat of cyberattacks on telecommunications giants, with sensitive customer data—particularly Social Security numbers and call logs—becoming prime targets for cybercriminals. The exposure of such information raises serious risks of identity theft, fraud, and privacy violations, as seen in the 2021 Shiny Hunters incident, where stolen data was sold on the dark web.

For affected customers, the settlement offers financial relief, but as cybersecurity expert Kate O’Flaherty noted in Forbes, “the genie is already out of the bottle” for those whose sensitive information was exposed. The payouts, while substantial, may not fully compensate for long-term damages like identity theft. AT&T’s statement emphasizes its commitment to customer data protection, but the breaches have sparked calls for stronger cybersecurity regulations in the telecom industry.

Posts on X reflect public frustration, with users like @raphousetv2 highlighting the settlement’s significance for affected customers, though the scale of compensation depends on documented losses and claim volume.

Stay Informed and Protect Yourself

If you were an AT&T customer in 2024, check your email (including spam folders) for a notice from attsettlement@e.emailksa.com to confirm your eligibility. To protect yourself from further risks:

• Monitor Your Accounts: Watch for unauthorized activity on bank accounts, credit cards, and AT&T accounts.
• Freeze Your Credit: Contact Equifax, Experian, and TransUnion to place a credit freeze to prevent identity theft.
• Enable Two-Factor Authentication: Strengthen your AT&T account security with 2FA.
• Beware of Scams: Be cautious of fraudulent emails or calls claiming to be from AT&T or Kroll Settlement Administration.

For the latest updates on the AT&T data breach settlement, eligibility details, and cybersecurity tips, visit www.nriglobe.com. Don’t miss the November 18, 2025, deadline to file your claim and secure your share of the $177 million settlement.

Keywords: AT&T data breach settlement, AT&T class action lawsuit, telecom data settlement, Kroll Settlement Administration, AT&T settlement claim, data breach compensation, cybersecurity, March 2024 breach, July 2024 breach, claim up to $7,500