The AT&T data breach in 2024 was among the most significant cybersecurity events of the year.
In 2019 and again in 2024, AT&T faced substantial data breaches, impacting the personal details of its customers. To address these issues, the company is preparing to offer a significant settlement, open to all eligible affected individuals, including those who are no longer customers.
On June 20, US District Judge Ada Brown granted preliminary approval for the settlement terms, which aim to resolve two lawsuits related to the breaches. Under the proposed terms, AT&T will allocate $177 million to compensate customers affected by at least one of these incidents.
This settlement is structured to prioritize higher compensations for customers who can demonstrate that they were significantly impacted by the breaches. Notably, those who experienced adverse effects from the 2019 breach, the larger of the two, may receive more substantial payments. While AT&T is actively seeking to resolve this matter, the company continues to maintain that it is not liable for the attacks perpetrated against its systems.
As further details regarding the settlement emerge, affected individuals are encouraged to stay informed. Additionally, individuals may want to explore ongoing claims related to other privacy breaches, including Apple’s Siri settlement and 23andMe’s recent data breach issues.
Overview of the Data Breaches
AT&T confirmed two separate data breaches last year: the first incident was acknowledged in March 2024, later detailed in May, while the second was confirmed in July. The initial breach, which occurred in 2019, involved the exposure of sensitive data belonging to approximately 7.6 million current and 65.4 million former customers. Compromised information included names, Social Security numbers, and birth dates, with some data surfacing on dark web forums.
The subsequent breach transpired in April 2024, when hackers infiltrated the cloud storage service Snowflake, accessing call and text records from 2022 for nearly all of AT&T’s US customer base, affecting around 109 million individuals. AT&T clarified that identifiable information was not associated with the accessed data, and law enforcement has made arrests relating to this incident.
Both breaches have sparked numerous class-action lawsuits, pointing to alleged negligence by AT&T in failing to adequately safeguard customer data.
Eligibility for Claims
The settlement is designed to compensate any current or former AT&T customers whose data was compromised during either breach. Customers must provide documentation showing losses attributed to the breaches to secure the highest payouts. Notices about eligibility for the settlement will be communicated via email or postal mail over the coming months, with the claims process anticipated to start on August 4, 2025.
Compensation Amounts
To qualify for the top tier of compensations, affected individuals must present reasonable proof of damages. Claimants from the 2019 breach could receive compensation up to $5,000, while those impacted by the 2024 breach may receive a maximum of $2,500. The settlement will prioritize payments for those with documented damages, and any remaining funds will be allocated to other claimants, even without proof of harm, though the exact amounts depend on total claims submitted.
Timeline for Payments
AT&T anticipates initiating payments in early 2026, with specific dates pending. The court has laid out a notification timeline from August 4 to October 17, 2025. Claims must be submitted by November 18, 2025, with final court approval expected on December 3, 2025, before disbursements commence.
Business owners and stakeholders in the tech sector should remain vigilant as more information unfolds over the coming months. Staying updated on these developments is crucial for understanding the ongoing impacts of data breaches and ensuring robust cybersecurity measures in their businesses.
For additional information on financial implications and support resources, visit CNET’s daily price tracking feature.
