Objection Filed Over Proposed AT&T Data Breach Class Action Settlement

Although AT&T announced in June that it will pay $177 million to settle data breach lawsuits being pursued over two massive security failures, not all customers are happy with the projected payouts, and some have filed objections to the proposed class action settlement agreement.

The tentative deal seeks to resolve all claims stemming from two separate data breaches, including one in March 2024 that affected more than 70 million people, and another that exposed the private text messages and cell phone records of tens of millions of customers.

As a result, the company has faced both individual and class action lawsuits over the AT&T data breaches, each alleging that the company failed to put in place adequate data security measures to protect the personal identifying information of its customers. This left millions of users exposed to identity theft, financial fraud and other privacy risks.

Sports-Betting-Addiction-Lawsuits
Sports-Betting-Addiction-Lawsuits

In June 2024, given the similarities of the cases being pursued throughout the federal court system, all AT&T data breach lawsuits were centralized in the Northern District of Texas under U.S. District Judge Ada E. Brown for coordinated discovery and pretrial proceedings.

A year later, in June 2025, a $177 million AT&T settlement was announced by parties involved in the litigation, which Judge Brown provided tentative authorization to proceed. However, not all plaintiffs are supportive of the agreement.

One plaintiff, August Wakat, filed an objection to the proposed settlement (PDF) on August 11, on behalf of himself and his business Poe Boy Fleming Auto Salvage, Inc. saying his harms could only be resolved through an individual trial.

Wakat, whose data was compromised in the March 2024 attack, argues that the settlement is inadequate to address his and others’ harms, and that the proposed settlement payouts let AT&T off the hook for willful disregard of proper cybersecurity procedures.

“The data breach was not an isolated incident but occurred over a prolonged period exceeding one year, during which AT&T was placed on notice of multiple security vulnerabilities and failed to take corrective measures. This amounts to willful disregard for Plaintiff’s rights and a pattern of gross negligence, if not intentional misconduct.”

– August Wakat, AT&T data breach plaintiff

He called on the court to reject the proposed settlement agreement or, alternatively, exclude his claim from the settlement and allow him to pursue an individual complaint.

Proposed AT&T Data Breach Settlement

If approved, the settlement would include two payout funds: $149 million allocated for individuals affected by the March 2024 internal system breach, and $28 million reserved for those impacted by the July 2024 breach involving data stored on a third-party cloud platform hosted by Snowflake.

As part of the agreement, AT&T also agreed to enhance its data security protocols and will provide confidential documentation to class counsel outlining its remedial efforts.

The court began accepting claim submissions on August 4. Affected consumers have until November 18 to apply through the official AT&T data breach settlement website.

The settlement establishes two separate classes, each with its own eligibility criteria and compensation limits.

  • AT&T 1 Settlement Class: U.S. residents whose personal data—such as names, birth dates, phone numbers or Social Security numbers—was exposed in the internal system breach. Eligible claimants may receive up to $5,000.
  • AT&T 2 Settlement Class: Current or former AT&T customers whose metadata, including call logs and tower connection information, was accessed during the Snowflake cloud platform breach. Eligible claimants may receive up to $2,500.

Some consumers may qualify for compensation under both classes. While AT&T denies any wrongdoing, the settlement aims to provide financial relief and avoid the uncertainty of extended litigation.

A final approval hearing is scheduled for December 3, 2025.


Written By: Irvin Jackson

Senior Legal Journalist & Contributing Editor

Irvin Jackson is a senior investigative reporter at AboutLawsuits.com with more than 30 years of experience covering mass tort litigation, environmental policy, and consumer safety. He previously served as Associate Editor at Inside the EPA and contributes original reporting on product liability lawsuits, regulatory failures, and nationwide litigation trends.




3 Comments


Delon
I been having information leak out to spam scams all the time…

Portia
I need a lawyer. Someone hacked my information; catfished several businesses using my name… just a different spelling, and hacked an email that I for 30+ years rendering me helpless as thus is the email I used for business. The person doing all of this went to Midlands Honda and brought a car… also brought low jack foe the car… a house etc using my alias!

D
ATT IS FALLING BEHIND IN TECHNOLOGY. COSTING MORE AND MORE THEN LESS QUALITY/SAFETY FOR THOSE THEY CLAIM TO BE PROTECTING. EXCUSES.

Share Your Comments

This field is hidden when viewing the form
I authorize the above comments be posted on this page
Post Comment
Weekly Digest Opt-In

Want your comments reviewed by a lawyer?

To have an attorney review your comments and contact you about a potential case, provide your contact information below. This will not be published.

NOTE: Providing information for review by an attorney does not form an attorney-client relationship.

This field is for validation purposes and should be left unchanged.

MORE TOP STORIES

Roblox is facing a lawsuit from a Georgia mother who alleges the platform’s failure to implement adequate child safety measures allowed online predators to groom her young son.
Hearings over the validity of expert witnesses in hair relaxer cancer lawsuits will begin on April 1, 2026, when plaintiffs’ experts must convince the judge that their testimony linking the products to cancer is scientifically reliable enough to be presented to juries.