Final Approval Sought for AT&T Data Breach Class Action Lawsuit Settlement

Out of 2 million potential AT&T data breach class action members, only 15 have objected to the deal, plaintiffs indicate.

AT&T customers are asking a federal judge to approve a $205 million data breach settlement deal that would resolve class action lawsuits over two recent data breaches that exposed consumers’ personal identifying information to hackers.

In June, the communications company reached a tentative deal to resolve class action claims linked to two separate data breaches, including one in March 2024 that affected more than 70 million people, and another that exposed the private text messages and cell phone records of tens of millions of customers.

There are currently 133 AT&T individual and class action data breach lawsuits filed in federal courts nationwide, each alleging that the company failed to employ adequate security measures to protect consumers’ data, which left millions exposed to identify theft, financial fraud and other privacy risks.

Since June 2024, all AT&T data breach lawsuits have been centralized as part of a multidistrict litigation (MDL) in the Northern District of Texas under U.S. District Judge Ada E. Brown for coordinated discovery and pretrial proceedings. A year after the MDL was formed, AT&T and plaintiffs announced the proposed settlement.

On November 3, plaintiffs filed an unopposed motion for final approval (PDF) of the class action lawsuit settlement. They indicate that consumers have positively received the proposed settlement, noting that out of 2 million settlement class members, only 1,556 opted out and only 15 have objected.

“The Settlement compensates Settlement Class Members who have documented financial losses, vindicates the Settlement Classes’ privacy rights, and reduces the prospect of subsequent data incidents, all at a fraction of the time and expense such complex litigation typically requires.”

– Plaintiffs’ Unopposed Motion for Final Approval of Class Action Settlement.

The first class action settlement deal would lead to AT&T paying consumers $177 million, while the second class action settlement would cost the company $28 million. The court began accepting claim submissions on August 4. Affected consumers have until November 18 to apply through the official AT&T data breach settlement website.

The settlement establishes two separate classes, each with its own eligibility criteria and compensation limits.

• AT&T 1 Settlement Class: U.S. residents whose personal data—such as names, birth dates, phone numbers or Social Security numbers—was exposed in the internal system breach. Eligible claimants may receive up to $5,000.
• AT&T 2 Settlement Class: Current or former AT&T customers whose metadata, including call logs and tower connection information, was accessed during the Snowflake cloud platform breach. Eligible claimants may receive up to $2,500.

Some consumers may qualify for compensation under both classes. While AT&T denies any wrongdoing, the settlement aims to provide financial relief and avoid the uncertainty of extended litigation.

A final approval hearing is scheduled for December 3, 2025.

Sign up for more legal news that could affect you or your family.