In March 2024, AT&T revealed that sensitive customer data from a 2019 breach had surfaced on the dark web, impacting approximately 7.6 million current and 65.4 million former customers. The company later confirmed a separate 2021 incident where unauthorized parties accessed customer information.
Following these breaches, AT&T faced two class action lawsuits. The wireless carrier agreed to pay $149 million for the 2019 breach and $28 million for the 2021 event. Combined, eligible customers may claim up to $7,500 in total — with potential reimbursements of up to $5,000 for the first settlement and up to $2,500 for the second.
Who Qualifies for Each Settlement
Settlement One (2019 breach):
AT&T customers — current or former — whose Social Security numbers were compromised. If you can document financial losses up to $5,000 “fairly traceable” to the breach, you fall into Tier One eligibility.
Settlement Two (2021 breach):
Customers whose personal “Data Elements,” but not Social Security numbers, were exposed. Claimants can seek reimbursement for verified losses of up to $2,500, plus possible additional funds from any remaining settlement balance after administration and legal costs.
Your total payout across both settlements cannot exceed $7,500 and depends on how many claims are submitted.
Filing Deadlines and Process
- Claim filing deadline: December 18, 2025
- Opt-out or objection deadline: November 17, 2025
To participate, you must have been an AT&T customer affected by one or both incidents. New customers who joined after these breaches are not eligible. Claims can be submitted online or by mail before the December deadline. If you take no action, you won’t receive compensation or retain the right to sue independently.
How Payouts Are Determined
Class action settlements distribute compensation from a fixed fund, so the more people who file, the smaller each payment becomes. Legal teams and administrative costs are also deducted from the total.
Broader Context
Class action settlements have become increasingly common in the tech and telecom sectors. In 2024, Cash App users received payouts of over $80 due to a similar security breach, while Verizon reached a $100 million settlement. These cases underscore how data privacy lapses continue to cost companies — and affect millions of consumers.
