AT&T has agreed to a $177 million settlement following two significant data breaches that exposed the personal information of millions of customers. On October 2, 2026, a federal judge approved the settlement, which resolves lawsuits related to the incidents disclosed in 2024. The breaches compromised personal and call data, affecting both current and former customers.
Judge Sidney A. Fitzwater of the U.S. District Court for the Northern District of Texas granted the final approval. The settlement includes a $149 million fund for the first breach and a $28 million fund for the second, with legal and administrative costs covered by these funds. AT&T settled without admitting any liability or wrongdoing.
The first breach was announced on March 30, 2024, when customer data surfaced on the dark web. This incident affected approximately 73 million individuals, including 7.6 million current and 65.4 million former account holders. The leaked information varied but could include names, contact details, account passcodes, and Social Security numbers. AT&T indicated it had no evidence that the breach resulted from unauthorized access to its systems and was investigating potential links to a vendor.
The second breach, disclosed on July 12, 2024, involved data accessed from an AT&T workspace on Snowflake's cloud platform. This breach affected nearly all AT&T cellular customers and included data such as phone numbers, call durations, and cell tower identifiers. Unlike the first breach, it did not involve Social Security numbers or the content of communications.
The settlement allows eligible claimants to receive compensation for documented losses. Affected individuals from the first breach can claim up to $5,000, while those impacted by the second can receive up to $2,500. Customers affected by both breaches may qualify for both payments but must provide separate evidence for each. The deadline for claims passed on December 18, 2025, and the distribution of funds will occur after claim reviews and potential appeals. Customers are advised to stay informed through official updates and remain vigilant against phishing attempts exploiting the leaked data.
