Claims for AT&T Data Breach Payouts Must Be Submitted by Nov. 18

Window to apply for an AT&T settlement payout stemming two separate data breaches last year opened on August 4.

AT&T customers whose personal information was stolen by hackers in two massive data breaches can now begin applying for their share of a $177 million settlement agreement reached in June.

The company experienced two major data breaches last year, including one in March that affected more than 70 million people, followed by another that exposed records of calls and text messages made by AT&T customers.

In the wake of the breaches, individual AT&T and class action lawsuits were filed nationwide, alleging that the company failed to implement adequate data security measures to protect the sensitive personal information it collected from customers. Plaintiffs claim the company’s negligence left millions of users exposed to identity theft, financial fraud and long-term privacy risks.

Due to the similarities among the cases, the lawsuits were centralized in the Northern District of Texas in June 2024 for coordinated pretrial proceedings before U.S. District Judge Ada E. Brown.

In June 2025, the parties announced they had reached a tentative $177 million settlement agreement to resolve the consolidated data breach litigation, which Judge Brown authorized to proceed. The agreement addresses two separate cyberattacks that exposed sensitive information belonging to millions of consumers.

The settlement includes two payout funds: $149 million allocated for individuals affected by the March 2024 internal system breach, and $28 million reserved for those impacted by the July 2024 breach involving data stored on a third-party cloud platform hosted by Snowflake. AT&T also agreed to enhance its data security protocols and will provide confidential documentation to class counsel outlining its remedial efforts.

Claim submissions opened on August 4, and affected consumers have until November 18 to apply through the official AT&T data breach settlement website. A final approval hearing is scheduled for December 3, 2025. The settlement establishes two separate classes, each with its own eligibility criteria and compensation limits.

• AT&T 1 Settlement Class: U.S. residents whose personal data—such as names, birth dates, phone numbers or Social Security numbers—was exposed in the internal system breach. Eligible claimants may receive up to $5,000.
  
• AT&T 2 Settlement Class: Current or former AT&T customers whose metadata, including call logs and tower connection information, was accessed during the Snowflake cloud platform breach. Eligible claimants may receive up to $2,500.
  

Some consumers may qualify for compensation under both classes. While AT&T denies any wrongdoing, the settlement aims to provide financial relief and avoid the uncertainty of extended litigation.

Sign up for more legal news that could affect you or your family.