The settlement stems from two separate data breaches disclosed by the telecommunications giant in 2024. The security incidents sparked lawsuits alleging that AT&T failed to adequately protect customers’ sensitive personal information.
A federal court granted final approval to the $177 million settlement on October 2, paving the way for eligible customers to receive compensation.
If no appeals are filed, the settlement is expected to take effect on November 12, with payments scheduled to be distributed within 60 days of the effective date.
AT&T agreed to the $177 million settlement following class-action lawsuits accusing the telecommunications giant of failing to implement adequate cybersecurity measures to protect customers’ personal information.
The settlement covers two separate data breaches disclosed in 2024, with $149 million allocated to the March incident and $28 million tied to the July breach.
The March breach exposed sensitive customer information, including Social Security numbers, home addresses and account passcodes. The incident affected approximately 7.6 million current AT&T customers and 65.4 million former account holders.
Eligible customers impacted by the March breach may receive up to $5,000 in compensation for documented out-of-pocket losses directly related to the security incident. Alternatively, affected individuals can choose a tiered cash payment without providing proof of financial losses.
Under the tiered payment system, customers whose most sensitive information, such as Social Security numbers, was compromised may qualify for higher payouts. Those eligible for Tier 1 compensation do not need to demonstrate financial losses, provided records confirm that their sensitive data was exposed.
Meanwhile, the July 2024 breach involved unauthorized access to customer call and text interaction records stored on a third-party cloud platform.
Customers affected by the second incident may qualify for up to $2,500 in compensation if they can provide documentation of related financial losses.
The July breach affected nearly all AT&T wireless customers, making millions of current and former account holders potentially eligible for a share of the settlement.
Court documents reveal that some victims suffered serious financial consequences from the breaches, including emptied bank accounts and fraudulent loans opened in their names.
In a 2024 statement, AT&T acknowledged that it was unclear whether the data exposed in the March breach originated from the company itself or one of its vendors. The company has never publicly confirmed the source of that leaked dataset.
The July breach, meanwhile, involved customer information illegally downloaded from AT&T’s workspace on a third-party cloud platform.
Public reports and letters from lawmakers identified the platform as Snowflake, a cloud-based data storage and analytics company. Although congressional correspondence referenced Snowflake shortly after the July disclosure, AT&T did not identify the company by name in its official statement or Securities and Exchange Commission filing.
When will AT&T settlement payments arrive?
Eligible customers who submitted valid claims before the deadline are expected to receive their settlement payments by the end of 2026.
More than 4.9 million claims were reportedly submitted, with approximately 3 million approved. Another 1.1 million claims were rejected for reasons including late submissions, duplicates, suspected fraud, withdrawals or ineligibility, according to The Sun.
The deadline to file a claim was December 18, 2025, meaning affected customers who missed the cutoff can no longer apply for compensation under the published settlement terms.
AT&T agreed to pay the $177 million settlement to resolve the litigation and avoid further legal proceedings, while denying any wrongdoing.
Customers who already filed a claim can check their AT&T data breach settlement status and find the latest payment updates through the official settlement website at telecomdatasettlement.com or by calling 833-890-4930.
