If you had an AT&T account in 2019 or 2024, you may now be entitled to money. A large settlement has been reached after two separate data breaches exposed information belonging to millions of customers.
The agreement, which still needs final court approval, creates a pool of $177 million. That money will be shared between people affected by either of the breaches, one involving older customer records and another tied to call logs stolen last year.
Two incidents, years apart
The first incident wasn’t new when people heard about it. What came to light in 2024 was actually old customer data, apparently dating back to around 2019. In March of that year, AT&T admitted that a huge set of records, affecting over 70 million current and former customers. The stolen data had turned up for sale on a dark-web site. The files held names, addresses, phone numbers, Social Security numbers, and even account passcodes.
Not long after, in July 2024, AT&T had to tell customers about a different security incident. Hackers had broken into information kept with its cloud provider, Snowflake. This time the stolen data included call logs and text records, showing who was contacted and when. Reports at the time suggested the scale could reach tens of millions of users.
Court cases followed almost immediately. People suing the company said AT&T failed to keep personal details safe and should have acted faster. AT&T says it did nothing wrong but agreed to a settlement to avoid years of legal fighting.
Who qualifies for payment
Under the proposed deal, there are two separate settlement funds. The first — worth $149 million — is for people tied to the 2019-era data. The second — $28 million — covers those whose call records were taken in 2024.
For those without receipts or paperwork, there is still a chance to receive a smaller payment. That amount will depend on how many people file claims and the size of the legal fees and administrative costs deducted from the settlement fund.
What you need to do
Filing is not automatic. If you think your data was included, you must submit a claim form. The forms are available at TelecomDataSettlement.com and can be completed online.
You can also send one by mail to:
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
All claims must be filed or postmarked by November 18, 2025.
Other options
If you want to stay in the settlement but disagree with its terms, you can submit an objection. That has to be done by October 17, 2025. You may also “opt out” completely by the same date if you prefer to sue AT&T on your own.
Doing nothing means you give up the right to bring your own claim later, but you also won’t get paid from this settlement.
When the court will decide
The final hearing is scheduled for December 3, 2025 in federal court in Texas. If the judge signs off on the agreement, payments could start going out in 2026.
Some customers may also get free credit monitoring for up to two years, depending on their eligibility and which breach affected them.
