AT&T customers who filed claims over twin 2024 data breaches could soon see checks land in their mailboxes.
The telecom giant agreed to pay $177 million to resolve class-action lawsuits stemming from security incidents disclosed last March and July, with a federal judge granting final approval on Oct. 2, according to court records. If no appeals derail the deal, the settlement takes effect on Nov. 12, and payouts must be issued within 60 days — putting money in victims’ hands before the calendar flips to 2026.
The March 2024 breach, which drove the bulk of the settlement at $149 million, exposed highly sensitive personal information belonging to more than 7.6 million active account holders and 65.4 million former customers. Compromised data included Social Security numbers, home addresses, and account passcodes. Victims who documented out-of-pocket losses tied to that incident can receive up to $5,000 in reimbursement.
Those same March victims could also opt for a tiered cash payout instead of proving specific financial harm. Under that structure, Tier 1 payments go to individuals whose most sensitive information — such as Social Security numbers — was compromised, with no additional proof of loss required if documentation shows their data was leaked.
A second breach in July 2024 added $28 million to the total settlement pool. That incident involved call and text interaction logs stored on a third-party cloud platform, with nearly all AT&T customers affected. Victims in that class may claim up to $2,500 for proven losses.
The July breach reportedly traced to data illegally downloaded from AT&T’s workspace on a third-party cloud platform. Public reporting and congressional correspondence identified that platform as Snowflake, though AT&T’s public statements and SEC filings referenced only an unnamed vendor workspace. The company never confirmed the origin of the March dataset leak. In its 2024 statement, AT&T said it remained unknown whether the leaked data originated from the company itself or one of its vendors.
Court filings painted a grim picture of the fallout. Several victims reported severe identity theft consequences, including drained bank accounts and fraudulent loans taken out in their names.
The claims process has already closed. Eligible customers needed to submit claims by Dec. 18, and that window has now shut under the published settlement terms. The response was massive: more than 4.9 million claims were submitted, with 3 million approved for payment. Another 1.1 million were rejected as late, duplicate, fraudulent, released, withdrawn, or ineligible business claims.
AT&T agreed to the settlement to avoid further litigation but did not admit to any wrongdoing as part of the deal. Customers who filed claims can check their status or view updates on the official settlement portal at telecomdatasettlement.com or by calling 833-890-4930.
The March 2024 breach first surfaced when AT&T disclosed that attackers had accessed sensitive customer records, triggering the wave of lawsuits that eventually produced the $149 million allocation. The July incident followed months later, compounding the company’s legal exposure and adding the $28 million segment to the overall settlement.
Class members with approved claims are expected to see payments issued by the end of 2026.