AT&T Data Breach Lawsuit

AT&T Data Breach Class Action Lawsuits

In March 2024, AT&T admitted to a significant data breach that exposed the personal information of approximately 73 million users. As a result, individual claims and AT&T data breach class action lawsuits are being pursued against the carrier by current and former customers who may be entitled to financial compensation.

Evidence has become available that indicates AT&T was aware of the data breach as early as August 2021, yet failed to take action to protect its customers sensitive information or alert regulators of the data exfiltration.

Individuals are now filing AT&T lawsuits and class action claims against the telecommunications company for failing to take appropriate action to safeguard their current and former customers’ data. The complaints emphasize AT&T’s delays in acknowledging the breach and notifying customers, which plaintiffs argue left personal data at risk for an extended period, increasing the likelihood of identity theft and fraud.

Who Qualifies for the AT&T Class Action Lawsuit?

To qualify for the AT&T data breach class action lawsuits, you need to be either a current or former AT&T customer whose personal information was compromised as a result of the data breach.

Individuals who have received a notification from AT&T about any of their personal information being stolen due to the recent data breach may be eligible to join the lawsuit.

To determine whether you or a loved one may be eligible for an AT&T data breach lawsuit settlement, submit information about your potential claim for review by a lawyer to determine whether a settlement or lawsuit payout may be available.

2024 AT&T Data Breach Lawsuit Updates

May 1, 2024 Update: Following the recent motion to consolidate AT&T lawsuits, the JPML is scheduled to hear oral arguments on whether to centralize AT&T claims filed throughout federal district courts nationwide at an upcoming hearing session on May 30, 2024, at the Orrin G. Hatch U.S. Courthouse in Salt Lake City, Utah.

April 29, 2024 Update: Given common questions of fact and law raised in a growing number of AT&T data breach lawsuits, a motion to transfer was filed with the U.S. Judicial Panel on Multidistrict Litigation (JPML) requesting that all claims filed throughout the federal district court system be consolidated for pretrial proceedings in the Northern District of Texas.

April 2, 2024 Update: Alex Petroski filed one of the first AT&T class action lawsuits in the U.S. District Court for the Northern District of Texas on April 2, claiming that the data breach was a direct result of AT&T’s failure to implement adequate and reasonable cyber-security procedures and protocols necessary to protect consumers’ personally identifiable information (PII) from a foreseeable and preventable cyber-attack.

March 30, 2024 Update: AT&T issued a press release regarding the data breach on March 30, disclosing that the 2021 data breach exposed the names, addresses, phone numbers, Social Security numbers, and email addresses of approximately 7.6 million current account holders and approximately 65.4 million former account holders.

AT&T Ignored Data Breach Warnings

AT&T first learned of the potential data breach in August 2021, when the hacker group Shiny Hunters claimed to have accessed and intended to sell a database filled with sensitive customer data for approximately $1 million. Initially, AT&T disputed these claims, asserting that the leaked data samples shared by Shiny Hunters did not match their own records.

Instead of conducting a thorough investigation into the alleged breach and alerting customers and regulatory bodies as required by law, AT&T maintained that the breach claims were unfounded and did not notify its customers.

Almost three years later, a hacker known as “MajorNelson” publicly released the entire AT&T database for free on the dark web in late March 2024, exposing the names, addresses, phone numbers, Social Security numbers, and email addresses of approximately 7.6 million current account holders and approximately 65.4 million former account holders.

AT&T Admits to Massive Data Breach

After the data was released on March 30, 2024, a press release issued by AT&T admitted that the August 2021 data breach has exposed the names, addresses, phone numbers, Social Security numbers, and email addresses of approximately 7.6 million current account holders and approximately 65.4 million former account holders.

According to AT&T, the exposed data dates back to 2019 and earlier. However, the company has yet to identify the source of the unauthorized access to its systems that resulted in the massive exfiltration of customer data.

Despite the initial breach notification occurring years after the first alleged incident, AT&T has now begun sending Notice of Data Breach letters to customers with known compromised sensitive personal information. AT&T stated they are also offering complimentary identity theft and credit monitoring services to customers.

However, AT&T data breach lawsuits and class action claims seek additional damages on behalf of former customers raising allegations that the company failed to adequately protect consumer data, potentially leading to significant personal and financial harm for affected customers. Critics argue that despite the risks, AT&T might have prioritized the company’s commercial benefit over implementing more stringent security measures.

What Information was stolen in the AT&T Data Breach?

AT&T’s investigation into the data breach has identified that hackers stole the following customer information;

• Name
• Mailing Addresses
• Phone Number
• Social Security Number
• Date of Birth
• AT&T account number and passcode

How was AT&T hacked?

Security experts have suggested that the compromised data could be traced back to third-party partners of AT&T, possibly through inadequate cybersecurity measures at these partners.

However, AT&T stated that their investigation has not discovered any evidence of unauthorized access to its systems resulting in exfiltration of the data set. At this time, AT&T is continuing to work with cybersecurity experts to determine how the data was stolen.

What to do if your information was stolen during the AT&T data breach

In response to the AT&T data breach, impacted customers are being urged to take proactive steps to secure their information. You should consider changing your AT&T account passcode immediately. Additionally, stay proactive by regularly checking your account activity and credit reports.

Setting up free fraud alerts with the major credit reporting agencies—Equifax, Experian, and TransUnion—can also be beneficial. Moreover, you have the right to obtain a free copy of your credit report annually from each of these agencies through AnnualCreditReport.com.

Is AT&T offering free identify theft monitoring?

Yes, AT&T is offering impacted customers a free one-year membership of Experian’s IdentityWorks, which includes credit monitoring, identity theft detection, and resolution services. This membership also comes with an insurance policy that provides coverage up to $1 million for identity theft incidents and access to an Identity Restoration team.

According to the Notice of Data Breach letters sent to AT&T customers, individuals will have until August 30, 2024 to activate their Experian’s IdentityWorks membership. To activate the membership, customers must visit the Experian® IdentityWorksSM website, click on ‘Get Started,’ and enter their activation code.

The services included in the one year Experian membership include;

• Experian Credit Report at Signup: Customers will receive a credit report after signing up to see the details associated with their credit profile.
• Credit Monitoring: This service will routinely check your Experian credit file for signs of fraudulent activity.
• Internet Surveillance: A dedicated technology continuously scans the internet, including chat rooms and bulletin boards, to detect if your personal information is being traded or sold on the dark web.
• Identity Restoration: If fraud is detected, specialists will assist with both credit and non-credit related fraud issues.
• Credit Lock/Unlock: You have the ability to lock or unlock your Experian credit file.
• $1 Million Identity Theft Insurance: Provides up to $1 million in insurance to cover costs related to identity theft recovery.

AT&T Data Breach Risks to Customers

If your personal information was stolen during the AT&T data breach, a hacker could use such information against you for;

• Identity Theft: With access to your social security number and other personal information, a hacker could potentially impersonate you to open new lines of credit, apply for loans, or obtain services in your name. This could damage your credit rating and cause financial loss.
• Financial Fraud: Hackers might access and drain your existing bank accounts, or use your information to deceive financial institutions into giving them access to your funds.
• Phishing Attacks: Using your personal details, a hacker could craft convincing phishing emails or messages that appear to come from legitimate sources. This can lead to further theft of your financial information or login credentials for various services.
• Account Takeover: With detailed personal information, it’s easier for attackers to answer security questions or request password resets on your existing accounts, ranging from social media to financial services, leading to unauthorized access.
• Tax Fraud: A hacker could use your social security number to falsely file tax returns in your name and steal tax refunds.
• Medical Identity Theft: Using your social security number and other personal details, an individual could potentially receive medical care under your identity, which can lead to medical bills charged to you and could corrupt your medical records.
• Utilities Fraud: The information could be used to set up utilities accounts (like electricity, water, and gas) in your name but at different addresses, possibly going unnoticed until debts are incurred.
• Legal Implications: Should the hacker commit crimes using your identity, you could be implicated or need to prove your innocence.
• Loss of Privacy: Knowing your home address and personal details, a hacker or malicious party could potentially harass you or even commit crimes such as stalking or burglary.
• Long-Term Security Risks: Even after the initial breach and potential immediate misuse of your information, the stolen data could be sold on the dark web, leading to ongoing risks and threats.

Real Customer Experiences: Impact of AT&T Data Breach on Fraud and Stolen Information

In the wake of the recent AT&T data breach, hundreds of customers have turned to the AboutLawsuits platform to share their firsthand accounts of the incident’s repercussions.

These AT&T data breach testimonials provide a deeply personal insight into the considerable impact of the data breach, revealing not only the vulnerabilities in personal security but also the profound effects on individual lives.

From instances of fraud to the unsettling theft of sensitive information, these stories underscore the far-reaching consequences of data security failures.

AT&T Data Breach Lawsuits

As of early April 2024, at least 12 lawsuits have been filed against AT&T related to a data breach, each raising allegations that the company failed to take adequate preventive measures to protect sensitive customer data.

Due to the growing number of claims raising similar allegations, a motion to consolidate these cases was submitted to the U.S. Judicial Panel on Multidistrict Litigation on April 2, 2024, requesting the claims be centralized for pretrial proceedings in the Northern District of Texas, where the majority have been lodged.

Only one of the cases has been filed in the Western District of Oklahoma. The motion highlights the complexity of the breach and argues that consolidating the cases would help in managing the proceedings more efficiently, avoiding conflicting rulings, and easing the legal process for all parties involved.

Allegations Raised in AT&T Lawsuits

The allegations raised in the AT&T data breach lawsuits focus on several key issues regarding the company’s handling of customer data:

• Negligence: Plaintiffs argue that AT&T failed to implement and maintain adequate security measures to protect customers’ sensitive personal information. This negligence is believed to have facilitated the unauthorized access and theft of data.
• Failure to Disclose Timely: There are claims that AT&T did not promptly notify affected customers about the breach, which potentially delayed individuals’ ability to take protective measures against identity theft and fraud.
• Breach of Contract: The lawsuits also allege that AT&T breached their contractual obligations to customers by failing to adequately secure their personal data, which is typically stipulated in service agreements.
• Unjust Enrichment: In some cases, the lawsuits accuse AT&T of unjust enrichment, suggesting that the company benefited financially from avoiding the costs associated with implementing adequate security measures.
• Violations of Consumer Protection Laws: Some claims specifically argue that AT&T’s actions violated specific state consumer protection laws by failing to safeguard consumer data adequately.

Contact an AT&T Data Breach Lawyer

AT&T data breach lawyers are providing free consultations and claim evaluations for individuals who have had their identifies stolen or suffered losses due to the AT&T data breach.

How do I Join the AT&T Class Action Lawsuit?

To determine whether you or a loved one may be eligible for an AT&T data breach lawsuit settlement, submit information about your potential claim for review by a lawyer to determine whether a settlement or lawsuit payout may be available. There are no fees or expenses unless a recovery is obtained in your case.