AT&T customers could be owed up to $7,500 as part of a $177 million settlement.
Millions of consumers’ personal information was exposed by a pair of past data breaches that weren’t disclosed until 2024, leading the phone company to be court-ordered to pay out $177 million.
Luckily for procrastinators, the court has extended the deadline to submit a claim until Dec. 18, 2025.
The two breaches occurred in 2019 and 2024. Yet, the 2019 breach — which involved personal data including Social Security numbers, birth dates and legal names — wasn’t disclosed until March 2024, weeks after customer data was detected spreading on the dark web.
From the 2019 breach, 7.6 million current AT&T customers and 65.4 million former account holders were affected.
The second data breach, which occurred in April 2024 and was disclosed in July 2024, gave hackers access to phone records from 2022 for nearly all 109 million of AT&T’s US customers stored in Snowflake, the company’s cloud-based data warehouse.
Multiple lawsuits for both breaches were filed, and all parties agreed to a settlement in March 2025.
Those affected by “AT&T 1 Data Incident” (the 2019 breach) will get a $149 million payout in the proposed settlement, while the class included in “AT&T 2 Data Incident” (the 2024 breach) will receive $28 million.
If you were affected by one or even both of the breaches, you’re eligible for a payout.
Kroll Settlement Administration, the organization managing AT&T’s legal settlement, created a website where eligible members can file their claims for compensation.
To file a claim, you’ll need to have a “Class Member ID,” which can be found in a notification likely sent by email from Kroll.
If you did not receive a notification and believe you should be included in either settlement, or if you’re not sure if you’re included, call the settlement administrator at 833-890-4930, or write to it at: AT&T Data Incident Settlement; c/o Kroll Settlement Administration LLC; P.O. Box 5324; New York, NY 10150-5324. Be sure to check your spam inbox as well.
Once you have your Claim Member ID, complete the filing forms with any documented information about losses as a result of either breach or both.
You can also print and mail the settlement forms — claim for the 2019 breach, claim for the 2024 Snowflake breach, and claim for people affected by both breaches — to the Kroll address above if you don’t want to submit the claim online. All forms should be postmarked by the Dec. 18 deadline.
While payouts will be ultimately determined by the number of people who file claims, those affected by the 2019 breach who can demonstrate a “documented loss” may be eligible to receive up to $5,000.
If an individual cannot prove the loss, they’ll be able to receive one of two tiered cash payments, which will be based on whether their Social Security number was included in the breach.
For the 2024 Snowflake breach, AT&T customers who were affected and can prove the same demonstrated loss with documentation can receive up to $2,500. Those without proof of loss will receive a “pro rata” share of the remaining money — meaning it will be divided evenly among them.
Anyone who was affected by both can file for both cases, and while it’s not clear an individual who proved losses for both could receive the full amount of $7,500, there’s nothing that says they can’t.
