$177 Million AT&T Settlement Resolves Data Breach Lawsuit Over Two 2024 Cyberattacks [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

AT&T has agreed to pay a $177 million class action settlement to resolve multidistrict litigation over separate data breaches that were announced in March and July 2024.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The AT&T data breach settlement covers two classes of consumers.

The AT&T 1 settlement class includes all individuals in the United States whose information was impacted in the incident announced on March 30, 2024, wherein certain AT&T-specific data was released on the dark web. According to the settlement agreement, the compromised information included some combination of names, mailing and email addresses, telephone numbers, dates of birth, account passcodes, billing account numbers and Social Security numbers.

The AT&T 2 settlement class covers all AT&T account owners or line or end users whose information was involved in the data breach announced on July 12, 2024, wherein certain information was downloaded from an AT&T workspace on a third-party cloud platform hosted by Snowflake. Per the settlement agreement, the impacted data included telephone numbers of current and former AT&T customers, along with the phone numbers with which those customers interacted, counts of such interactions and aggregate call durations for a day or month. In addition, for some individuals, the incident may have affected one or more cell site identification numbers associated with the interactions, the agreement says.

Related Reading: What is multidistrict litigation?

A $149 million settlement fund will be used to make payments to the AT&T 1 class, while AT&T 2 class members will receive payments from a $28 million settlement fund, court documents explain.

To receive an AT&T settlement payout, class members in either group must submit a valid claim form by November 18, 2025.

AT&T settlement claim forms can be filed by mail or online through the court-approved website once it is established.

ClassAction.org will update this page when the official AT&T settlement website is launched.

As part of the deal with AT&T, eligible AT&T 1 class members who submit a timely, valid claim form will be entitled to receive up to $5,000 in reimbursement for losses that are “fairly traceable” to the March 2024 incident and supported by reasonable documentation, the settlement agreement shares.

Alternatively, AT&T 1 class members can file a claim form to receive a Tier 1 or Tier 2 cash payment based on whether their Social Security number was impacted by the data breach. According to the agreement, a Tier 1 settlement payout (for individuals whose Social Security numbers were exposed) will be five times the amount of a Tier 2 payment.

Related Reading: AT&T Data Breach Lawsuit Says 73 Million People Impacted by 2024 Cyberattack

Moreover, eligible AT&T 2 class members who submit a timely, valid claim form will be entitled to receive up to $2,500 per person in compensation for documented losses that were incurred since April 14, 2024 and are reasonably linked to the July 2024 AT&T data breach, the settlement agreement describes. Account owners may file a claim for this benefit for themselves and on behalf of their end or line users, the document notes.

In lieu of this benefit, account owners may submit a claim form to receive a Tier 3 cash payment, court documents share.

Cash payout amounts—including Tier 1, Tier 2 and Tier 3 payments—will be pro-rated and based on the total number of claims that are filed, among other factors, the agreement states.

Related Reading: New AT&T Data Breach Lawsuit Filed After Call, Text Records of ‘Nearly All’ Customers Stolen by Hackers

Certain consumers may qualify as “overlap” class members included in both the AT&T 1 class and AT&T 2 class. The settlement agreement points out that if an “overlap” class member submits a claim form for a documented loss payout from both data breaches, the documentation for each benefit “must be unique, meaning [the consumer] may only use the information supporting a Documented Loss Cash Payment once.”

The AT&T settlement, which resolves the consolidated class action lawsuit against the company, received preliminary court approval on June 20, 2025. The parties now await a final approval hearing set for December 3, 2025, at which time the court will determine whether to ultimately approve the terms of the AT&T deal.

According to the agreement, notice of the settlement will be issued to eligible class members within 45 days following the date the deal received preliminary approval.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.