AT&T Data Breach Settlement
Up to $5,000
This settlement is closed to new claims — the deadline was December 18, 2025. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
AT&T announced two data incidents: on March 30, 2024, AT&T-specific data fields were found on the dark web (AT&T 1 Data Incident); and on July 12, 2024, limited data was illegally downloaded from an AT&T workspace on a Snowflake cloud platform (AT&T 2 Data Incident). The data exposed included names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers, Social Security numbers, and call interaction data. AT&T settled the consolidated lawsuits without admitting liability or wrongdoing.
Do you qualify?
AT&T 1 Settlement Class: All living persons in the United States whose data elements (names, addresses, phone numbers, email addresses, dates of birth, account passcodes, billing account numbers, or Social Security numbers) were included in the March 30, 2024 data incident. AT&T 2 Settlement Class: AT&T Account Owners or Line or End Users whose telephone numbers were involved in the July 12, 2024 data incident.
How to file
Submit a claim form by December 18, 2025 (deadline has passed). Claims can be for documented losses up to $5,000 (AT&T 1) or $2,500 (AT&T 2) with supporting documentation, or for pro rata cash payments without documentation. Contact the Settlement Administrator at (833) 890-4930 or mail AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324.
Common questions
- How much does the AT&T Data Breach Settlement pay?
- Estimated payout: Up to $5,000. Actual amounts depend on how many valid claims are filed — most settlements divide a fixed fund pro rata, so a higher claim rate means a smaller individual check. An "up to" figure is a cap, not a guarantee.
- What is the claim deadline for the AT&T Data Breach Settlement?
- This settlement is closed to new claims — the deadline was December 18, 2025. Once a claim deadline passes you generally forfeit your share, even if you qualified.
- Do I need proof of purchase for the AT&T Data Breach Settlement?
- No. You can file without a receipt or proof of purchase. You attest that you qualify and submit basic details, though claims are still subject to review and submitting a false claim is a crime.
- Is the AT&T Data Breach Settlement notice real, or a scam?
- Kroll Settlement Administration LLC is the settlement administrator for this case. Claims are filed at telecomdatasettlement.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
- When will payments from the AT&T Data Breach Settlement be sent?
- Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for January 15, 2026; no payments can be issued before a settlement receives final approval.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More data breach settlements
View all →FMC Services Data Breach Settlement
FMC Services, LLC experienced a data incident on or about July 26, 2022, in which an unauthorized third party compromised personally identifiable information and personal health information of class members. The company denies that any information had been acquired.
Urban One Data Breach Settlement
Urban One's computer systems were targeted in a cyberattack in March 2025, resulting in unauthorized access to files containing personal information such as identifying information or information that could be used to identify, locate, or contact individuals. Urban One denies any wrongdoing.
Kaplan v. Crimson Wine Group Data Breach Settlement
Crimson Wine Group, Ltd. suffered a targeted cyberattack on its computer systems in or about June 2024. Certain files containing private information were accessed, potentially including names, Social Security numbers, and financial account information. The company denies wrongdoing.
Serviceaide Data Breach Settlement
Serviceaide, Inc. experienced unauthorized access to its computer systems and network between September 19, 2024, and November 5, 2024, which exposed the private information of current and former patients of Catholic Health. The lawsuit alleges negligence, breach of implied contract, unjust enrichment, and invasion of privacy. The defendant denies all wrongdoing.