Millions of AT&T customers may soon receive a payout from a $177 million legal settlement tied to two massive data breaches in 2024. If approved, the settlement could provide up to $7,500 per person, depending on the nature of their losses. Here’s a complete guide to understanding the case, determining eligibility, and filing a claim before the deadline.
What led to the AT&T settlement?
In 2024, AT&T confirmed two major breaches that compromised sensitive customer information:
- March 2024 breach – Exposed the personal details of about 73 million current and former customers, including birth dates and Social Security numbers. This data was later found on the dark web.
- July 2024 breach – Hackers accessed AT&T data from a third-party cloud platform, exposing call and text records of “nearly all” AT&T cellular customers.
Both incidents triggered multiple lawsuits across the U.S., which were consolidated into two class-action cases. In August 2025, a federal judge announced a proposed $177 million settlement — $149 million for the first breach, and $28 million for the second.
The U.S. District Court for the Northern District of Texas will hold a final approval hearing on December 3, 2025. Until then, affected customers can submit claims.
Who is eligible for a payout?
You may qualify if your personal data was exposed in either — or both — breaches. Key points:
- March 2024 breach victims – Eligible for up to $5,000 for documented losses since 2019.
- July 2024 breach victims – Eligible for up to $2,500 for documented losses since April 14, 2024.
- Overlap class – Customers affected by both breaches could claim up to $7,500.
How to file a claim
The process is straightforward, but deadlines are strict.
- Confirm eligibility – Review the notice email or contact Kroll Settlement Administration.
- Gather documentation – Proof that your losses are “fairly traceable” to the breaches is required (e.g., bank statements, invoices, identity theft reports).
- Submit the claim form – Available on the official settlement website.
- Meet the deadline – Claims must be submitted by November 18, 2025.
How much money could you get?
The exact payout depends on the documented losses you submit:
- Up to $5,000 – For March 2024 breach victims with qualifying losses.
- Up to $2,500 – For July 2024 breach victims with qualifying losses.
- Up to $7,500 – For those in both breach categories.
Since these are reimbursement-based claims, customers must provide receipts, bank records, or official reports proving the loss was linked to the AT&T breaches.
When will payments be made?
Even if the court approves the settlement in December, payments are not immediate.
- Best-case scenario: Late 2025 or early 2026.
- Possible delays: Appeals or extended claim processing could push payouts further.
The settlement administrator has cautioned: “Please be patient. It also takes time for all of the claim forms to be processed.”
Why this case matters for consumers
This settlement is one of the largest consumer payouts in recent telecom history. It highlights:
- The scale of cyber risks – Both breaches impacted tens of millions of people, proving that even major telecoms are vulnerable.
- The legal trend toward accountability – Multi-million-dollar settlements are increasingly common in large-scale data breaches.
- The need for proactive monitoring – Customers should regularly review their credit reports and consider credit monitoring services after breaches.
What you should do now
If you think your data was compromised:
- Act quickly – Don’t wait until the November 18 deadline to file.
- Be thorough – The more documentation you provide, the stronger your claim.
- Stay vigilant – Monitor accounts for suspicious activity, even after filing.
