This Is Your Final Week to Claim a Share of the $177 Million AT&T Data Breach Settlement
If you were an AT&T customer in 2024, you may be entitled to part of a large settlement.
There is only one week left to file a claim regarding part of the massive settlement related to the 2024 elections. AT&T data breaches. The personal information of millions of customers was exposed, and following a lawsuit, the company was ordered to pay a $177 million settlement.
If you were affected by the breach, you may be entitled to compensation of up to $7,500.
For all you procrastinators, a court recently extended the deadline. You now have until December 18 to submit your claim. This means you only have seven days left to act.
If you have been affected by one or even both violations, you are entitled to compensation. But this could be your last opinion. The deadline is firm and you don’t want to miss this opportunity. Here’s everything you need to know about how to file your claim and how much money you could get.
Don’t miss any of our unbiased technical content and lab reviews. Add CNET as your preferred Google source.
What were these data breaches at AT&T?
The two data breaches linked to AT&T’s current $177 million settlement occurred in 2019 and 2024, although the company did not acknowledge the 2019 breach until March 2024, weeks after detecting the spread of customer data on the dark web.
The 2019 breach involved personal data, including Social Security numbers, dates of birth and legal names, and affected 7.6 million current AT&T customers and 65.4 million former account holders. Shortly after the disclosure, AT&T took the drastic step of resetting the passwords of all current customers involved in the breach.
The second data breach covered by the legal settlement occurred shortly after the first was disclosed. In April 2024, hackers accessed the 2022 phone records of almost all of AT&T’s U.S. customers (around 109 million) stored in Snowflake, the company’s cloud data warehouse. AT&T disclosed the breach in July 2024.
Associates of the hacker group ShinyHunters claimed responsibility for similar Snowflake attacks against approximately 165 companies in mid-2024. Two people were finally arrested for the AT&T hack.
Multiple lawsuits for both data breaches were filed after AT&T’s two disclosures and were consolidated shortly thereafter. All parties to both breach suits have agreed to a settlement in March 2025.
The class affected by “AT&T 1 Data Incident” (the 2019 breach) will receive a payment of $149 million under the proposed settlement, while the class included in “AT&T 2 Data Incident” (the 2024 Snowflake breach) will receive $28 million.
How do I file an AT&T settlement claim?
Kroll Settlement Administration, the organization that manages AT&T’s legal settlement, has created a website at telecomdatasettlement.com where eligible class members can file claims.
To file a claim for any portion of the settlement, you will need a “Class Member ID,” which should have been included in a notice from Kroll, most likely sent by email. If you can’t find the email, check your spam folder or other email filters.
You will need to retrieve your group member ID from the notification you received, or alternatively call the administrators to obtain an ID.
If you think you should be included in any part of the AT&T settlement and have not received notice, or if you are unsure whether you are included, you can call the settlement administrator at 833-890-4930or write to AT&T Data Incident Settlement; c/o Kroll Settlement Administration LLC; Box 5324; New York, New York 10150-5324.
Once you have a Claim Member ID with Kroll, you can complete the filing forms, including any documented information about losses you suffered due to one or both violations.
Traffic to the AT&T settlement website was measured. I recently checked the complaint submission form and received a Cloudflare warning: “We are experiencing high traffic volume and are using virtual queuing to limit the number of users on the website at one time.” » I had to wait 2 minutes to enter.
If you do not wish to submit a claim online, you can also print and mail the claim forms (all in PDF format): 2019 Violation Claim; 2024 Snowflake Violation Claim; claim for those affected by both violations. Posted forms should be sent to the Kroll address above and postmarked the same. December 18, 2025, deadline.
How much will payments be under AT&T’s privacy settlement?
How much could victims receive if they were involved in one or both of AT&T’s specific data breaches? Many payments will ultimately be based on the number of people who file claims, but we have some estimates of settlement terms.
Individuals affected by the 2019 data breach and who can demonstrate a “documented loss” may be eligible to receive up to $5,000. If someone cannot prove this loss, they will receive one of two cash payments, depending on whether their Social Security number was included in the violation.
For the 2024 Snowflake breach, AT&T customers who were affected and can prove the same loss demonstrated with documentation can receive up to $2,500. Those who have been affected but have no proof of loss will receive a “pro-rata” share of the remaining money, meaning it will be split fairly among them.
Those affected by the 2019 and 2024 data breaches can file claims for both classes. While it’s not entirely clear whether someone with two demonstrated losses could receive the full $7,500, there’s nothing in the settlement site’s language to indicate they couldn’t.
