AT&T reaches $177 million settlement for two 2024 data breaches

AT&T has agreed to a $177 million class-action settlement to resolve claims that the company failed to protect sensitive customer data during two separate breaches in 2024. Affected customers could pursue payments of up to $7,500 if they were impacted by both incidents, with deadlines for filing claims set for November 18, 2025. The deal, which covers breaches announced on March 30, 2024 and July 12, 2024, requires court approval and none of AT&T’s actions constitute an admission of wrongdoing.

The two data incidents involved different sets of information. The March 30 breach exposed a broad set of personal data, including names, addresses, dates of birth, Social Security numbers, account passcodes, billing numbers, and home contact details. In the July breach, the information exposed was more limited in scope but included the numbers customers interacted with and other call-related data. The events were consolidated into two class-action lawsuits that originated in federal court in Texas and are being administered as a single settlement by the designated settlement administrator.

Under the terms of the settlement, people affected by the March breach can claim up to $5,000 for...