AT&T, the third-largest wireless carrier, currently has more than 241 million mobile subscribers. With such a large number of customers, it comes as no surprise that the company has previously been the target of cyber hackers looking to steal data. Unfortunately, some of those data breaches have been so massive that it has led to a settlement as the company tries to appease its customers. Keep reading to learn more about the AT&T data breach settlement, how much you could receive if you’re eligible and how to file a claim.
What is the AT&T data breach settlement about?
In 2024, two class-action lawsuits were filed against the cell phone carrier regarding massive data breaches involving customers’ private information. The first incident from 2019 was reported in April last year and resulted in 73 million customers (both current and former) having their data stolen. A few months later, another breach occurred that impacted 100 million customers.
The hackers were arrested in connection with the breach, but there were still concerns about possible identity theft. AT&T insisted that no names were stolen with the other information and has denied any wrongdoing in the situation.
Despite this, the lawsuits were still filed, arguing that the company failed to protect its customers. AT&T has proposed a $177 million payout to settle the cases, particularly with the individuals who were affected by the hackings.
Who is eligible for compensation?
The settlement payout is expected to focus on any customers who had their data stolen in the breach, reports CNET.com. However, the top priority will initially be anyone who suffered severe damages as a result of the cyber hacking.
If you’re eligible for a portion of the payout, you should soon be receiving a letter in the mail or an email letting you know. The claims process will reportedly begin this month and continue through November.
How much money could you receive from AT&T?
Since there are multiple data breaches involved in the settlement, AT&T is offering two separate funds ($149 million for the first incident and $28 million for the second). The highest payments will be given to customers who can provide proof of damages. For the 2019 breach, there’s a maximum payout of $5,000. Those severely impacted by the 2024 incident could get up to $2,500.
Once those individuals are compensated, whatever funds remain will be given to other customers who were included in the data breach. This tier of claimants won’t need to provide any proof, but it’s unknown how much anyone in this category could receive. (It’s also unknown what will happen to anyone who was impacted by both breaches.) The amount will depend on both how many receive the larger payout and the number of people who file a claim for the remaining pool of money.
Step-by-Step: How to file a claim before November 18
If you were or have been an AT&T customer during either of the data breaches, you have until November 18, 2025, to submit a claim. Failure to do so means you will not receive any of the payout and will not be able to file any further lawsuits against the company. Anyone who chooses to object or exclude themselves from the settlement must do so by October 17.
To file a claim, you can fill out the form on the settlement website or mail it to the Settlement Administrator at AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. If you choose to mail the completed form, it must be postmarked by November 18, but it does not need to arrive by then.
It’s uncertain when payments will start getting sent out, but it definitely won’t be before the Final Approval Hearing, which takes place on December 3, 2025. Assuming a judge approves the settlement, customers will likely begin receiving their portion of the settlement in early 2026.
