(Photo by Cheng Xin/Getty Images)
Were you caught up in either of the two AT&T data breaches from 2019 or 2024? If so, you might be eligible for part of a $177 million settlement.
According to court documents, the settlement fund consists of $149 million to address a major data leak in 2019, which allowed cybercriminals to exploit the data of former and existing subscribers for years. Last March, AT&T finally confirmed the breach, sparking a wave of class-action lawsuits alleging the company had failed to safeguard the data of 51 million users, including their names, Social Security numbers, and dates of birth.
The rest of the $28 million is meant to address a second incident involving a hacker breaching AT&T’s account with cloud storage provider Snowflake in April 2024. This enabled the cybercriminal to access call and text records for nearly all customers. Another round of class-action lawsuits followed, alleging corporate neglect. However, AT&T said no customer names were included in the stolen information. Law enforcement also arrested the two alleged hackers involved in the breach.
How to Get Your Share of the AT&T Settlement Payouts
You're eligible for a payout if your data was compromised in one or both of the two data breaches mentioned above. Emails are going out about the settlement; check your spam folders for an email from Kroll Settlement Administration LLC (via attsettlement@e.emailksa.com), which will include the class member ID you'll need to file a claim.
If you think you're affected, but haven't received anything about the settlement, you can also use the contact form on the settlement website or call (833) 890-4930 to double-check.
How Much Money Can You Receive?
The amount you're entitled to depends on which breach you were impacted by; it could be both.
If Your Data Was Compromised in the 2019 Breach
Those impacted by the 2019 breach, known as the AT&T 1 Settlement Class, can submit a claim for one of two payouts.
- If you lost money due to the hack in 2019 or later, and have the documentation to prove it, you can request a reimbursement of up to $5,000.
Otherwise, you can request to be part of the class-action payout. How much you get will depend on how many people submit claims and what type of data was compromised.
- If your Social Security number was compromised, you'll get a Tier 1 Cash Payment. Otherwise, you'll get a Tier 2 Cash Payment. Whatever the final total is, a Tier 1 payment will be five times the amount of a Tier 2 payment.
If Your Data Was Compromised in the 2024 Breach
Those impacted by the 2024 breach, known as the AT&T 2 Settlement Class, can submit a claim for one of two payouts.
- If you lost money due to the hack on or after April 12, 2024, and have the documentation to prove it, you can request a reimbursement of up to $2,500.
- Otherwise, you can request to be part of the class-action payout. How much you get will depend on how many people submit claims.
What if Your Data Was Compromised in Both Breaches?
If your data got caught up in both breaches, you can file two claims. If you're submitting documentation for a reimbursement, however, the losses need to be different. You can't submit the same receipts for the $5,000 payout and the $2,500 payout.
How to Submit a Claim
Head to telecomdatasettlement.com and click Submit Claim. You'll be asked to enter a class member ID and then either your email address, AT&T account number, or your full name. You'll find the class member ID on the email or postcard you received from AT&T or Kroll Settlement Administration LLC. If you don't have that number, use the Contact Us form on the settlement website or call (833) 890-4930.
When Is the Deadline to Submit a Claim?
You must submit your claim form online at the settlement website by Dec. 18, 2025.
What if I Want to Sue AT&T Individually?
You had to opt out of the settlement class by Nov. 17, 2025, in order to keep your right to bring any other lawsuit against AT&T relating to these hacks. So, that deadline has passed.
What If I Don't Like the Terms of This Settlement?
You're out of luck. The deadline to object was also Nov. 17.
What If I Do Nothing?
You get no money and no right to sue AT&T at a later date.
In a statement, AT&T said: “While we deny the allegations in these lawsuits that we were responsible for these criminal acts, we have agreed to this settlement to avoid the expense and uncertainty of protracted litigation. We remain committed to protecting our customers' data and ensuring their continued trust in us.” The carrier also expects the settlement will receive approval by the end of this year.