Two data breaches that resulted in a class action lawsuit against AT&T are coming to a resolution, with the phone carrier agreeing to pay $177 million. AT&T agreed to pay the sum to avoid a trial.
The settlement was preliminarily approved by a Texas judge in August. Under the terms of the deal, affected customers may be able to claim up to $7,500. A settlement website from Kroll, the risk and financial advisory firm acting as the settlement administrator, is now available.
How we got here
The class action lawsuit was filed against the telecom giant over two different breaches from 2019 and 2024. The 2019 breach was not reported by AT&T until 2024, when data from that breach was being sold on the dark web.
That breach involved the personal data of more than 73 million former and current AT&T customers. Sensitive data included Social Security numbers, legal names, and birth dates. AT&T was forced to reset passcodes for millions of its customers.
The second breach hit in 2024 with hackers getting into data stored in AT&T's cloud-based data warehouse, Snowflake. Reportedly, that breach affected 109 million AT&T customers.
The stolen data mostly surrounded call information like mobile and landline numbers, calls and texts sent over AT&T's network, aggregate call duration and some cell site identification numbers. This data could be enough to figure out the identities of AT&T customers.
Separate lawsuits were filed over both data breaches before being consolidated into a single class action lawsuit.
"Parties have settled the actions in their entirety without any admission of liability or wrongdoing," the settlement website says.
How to know if you have a claim
The agreed-upon settlement is being split into two tiers: AT&T 1 Settlement Class and AT&T 2 Settlement Class.
The first tier covers the 2019 breach and is eligible for $149 million of the payout. The second tier covers the 2024 breach and is eligible for the remaining $28 million.
The Kroll Settlement Administration should send you an email if you qualify for the settlement. So keep an eye on your mailbox, including the spam folder.
If you believe you qualify but haven't received communication, you can reach out.
You can call (833) 890-4930 or send an inquiry letter to:
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
How to file a claim
A claim can be filed on the Kroll website or through the mail using the address above. You'll need to have a Class Member ID to file a claim, which should be provided by Kroll once it reaches out to you via email or otherwise.
If you don't want to submit online, you can print out the claim form and mail it.
These are the forms you'll need:
The claim must be submitted or postmarked by December 18, 2025.
What the settlement could pay
For those affected by the 2019 data breach you have to prove documented financial loss because of the breach. If so, you're eligible for up to $5,000. If you were affected by the 2024 breach you can qualify for up to $2,500.
Technically, you may qualify for both, but you might need to provide Kroll with proof for each incident.
If you can't prove that the breach directly led to financial loss but you still qualify, you'll receive a pro rata share of the remaining money. This will depend on how many people make claims.
Follow Tom's Guide on Google News and add us as a preferred source to get our up-to-date news, analysis, and reviews in your feeds. Make sure to click the Follow button!
