AT&T customers may be owed up to $7,500 as part of the settlement.
A pair of previous data breaches that exposed the personal information of millions of consumers was not disclosed until 2024, leading to the phone company being ordered by a court to pay $177 million.
Luckily for those procrastinating, the court has extended the deadline to submit claims to December 18, 2025.
The two violations occurred in 2019 and 2024. Yet, the 2019 breach, which involved personal data including Social Security numbers, dates of birth and legal names, was not disclosed until March 2024, just weeks after customer data was discovered spreading on the dark web.
The 2019 breach affected 7.6 million current AT&T customers and 65.4 million former account holders.
The second data breach, which occurred in April 2024 and was disclosed in July 2024, gave hackers access to the 2022 phone records of nearly all of AT&T’s 109 million U.S. customers stored in Snowflake, the company’s cloud-based data warehouse.
Multiple lawsuits were filed for both violations, and all parties agreed to a settlement in March 2025.
Those affected by the “AT&T 1 Data Incident” (2019 breach) would receive a $149 million payout in the proposed settlement, while the class involved in the “AT&T 2 Data Incident” (2024 breach) would receive $28 million.
If you have been affected by one or both of the breaches, you are entitled to payment.
The Kroll Settlement Administration, the organization managing AT&T’s legal settlement, has created a website where eligible members can file their claims for compensation.
To file a claim, you must have a “Class Member ID,” which can likely be found in an email notification from Kroll.
If you have not received a notification and you believe you should be included in any settlement, or if you are not sure if you are included, call the settlement administrator at 833-890-4930, or write to him or her at: AT&T Data Incident Settlement; c/o Kroll Settlement Administration LLC; PO Box 5324; New York, NY 10150-5324.
Be sure to check your spam inbox as well.
Once you have your Claim Member ID, complete the filing form with any documented information regarding damages you suffered as a result of the violation or both.
If you do not wish to submit a claim online, you can also print and mail the settlement forms – Claim for the 2019 Violation, Claim for the 2024 Snowflake Violation, and Claim for those affected by both violations – to the Kroll address provided above. All forms must be postmarked by the December 18 deadline.
While payouts will ultimately be determined by the number of people filing claims, people affected by the 2019 breach who can demonstrate “documented losses” may be eligible to receive up to $5,000.
If a person cannot prove a loss, they will be able to receive one of two tiers of cash payments based on whether their Social Security number was involved in the breach.
For the 2024 Snowflake breach, AT&T customers who were affected and can prove the same demonstrated loss with documentation may receive up to $2,500. Those who do not have proof of loss will receive a “pro-rata” share of the remaining money – meaning it will be divided equally between them.
Anyone who was affected by both can apply for both cases, and although it’s unclear whether a person who has proven damages for both can get the full amount of $7,500, there’s nothing that says they can’t do so.
<a href=