AT&T to pay $177M in data breach settlement
AT&T is set to pay a $177 million class action settlement after two alleged data breaches where sensitive customer data was released on the dark web.
unbranded – Newsworthy
Claims are open for millions of customers including Pennsylvania residents affected by two massive AT&T data breaches in recent years, with the telecommunications company agreeing to pay out a settlement worth $177 million.
The preliminary settlement agreement, handled by Kroll Settlement Administration, stems from a class action lawsuit against AT&T. The suit came following two large-scale data breaches announced in March and July 2024 that exposed customers’ private information, such as Social Security numbers, addresses, birthdates, passcodes, billing numbers, phone numbers, and more to the dark web, according to a release from Kroll.
The conditionally approved agreement from both data breaches divides claimants into two classes, although people affected by both breaches can file claims for both. The first breach exposed data of 7.6 million current and 65.4 million former account owners, according to an AT&T release from 2024. The second exposed information from 110 million people, and led to the arrest of several hackers.
AT&T has denied any wrongdoing as part of the agreement, and has not been found liable for anything by a court.
Here’s all you need to know about the settlement in Pennsylvania, if you are eligible and how to submit a claim.
Is the Kroll Settlement email a scam?
No. The email notices you received from the Kroll Settlement Administration is not a scam. Kroll is the settlement administrator handling the AT&T settlement, and sent notices about your options via the email attsettlement@e.emailksa.com. If you have questions, you can call 833-890-4930.
What did the AT&T data breach class action settlement allege?
AT&T was accused of two data breach incidents, one on March 30, 2024 and a second on July 12, 2024, according to Kroll Settlement Administration. The data breaches had allegedly occurred in 2019 and 2024, although the earlier breach was not acknowledged by the telecommunications company until March 2024, weeks after customer data had allegedly already spread to the dark web. A total of 73 million customers had their private information revealed, including passwords and Social Security numbers. At the time, AT&T took measures to reset passwords for millions of customers.
The second data breach reported in July 2024 covered by the legal settlement happened shortly after AT&T announced the first breach. In April 2024, hackers stole phone records of “nearly all” of its cellular and landline customers, as well as call history and text message contacts (although not the content of the messages). AT&T notified around 110 million customers, alerting them that hackers had stolen records from their Snowflake system, a provider of cloud services. In November 2024, two men were arrested and indicted by federal authorities, according to TechCrunch.
Am I eligible for the AT&T data breach settlement claim?
Customers affected by the first data incident who can prove “documented loss” can receive up to $5,000. This does not include self-prepared documents, such as handwritten receipts, accountings, statements and declarations, according to a website set up by Kroll to assist the public. If you cannot prove that loss, there are cash tier payments, based on whether your Social Security number was included in the breach.
For the second breach, customers who were affected and can prove the same demonstrated loss with documentation can receive up to $2,500. If you are unable to prove the loss, there are cash tier payments that are pro rata, meaning it will be divided up evenly between those who submit claims.
Those affected by both data breaches, or an overlap settlement class member, can file claims for both classes. It’s not entirely clear yet if someone who can demonstrate losses in both breaches will receive the full $7,500, as the settlement website does not make note of that.
How to submit claim for AT&T settlement
To submit a claim for the AT&T settlement, Kroll Settlement Administration has created a website where eligible class members can submit claims for compensation. Your completed claim form can also be submitted by traditional mail via the address located on the website.
When is the deadline to submit a claim?
The deadline to file a claim for the AT&T class action data settlement is Tuesday, Nov. 18, 2025.
What if I do nothing?
If you received notice of the AT&T settlement and believe you are eligible, but do nothing about it, you will not get paid. If you want to exclude yourself from the settlement and keep your right to sue over the claims of the lawsuit, you must opt out by mailing a written request to the settlement administration via the address found here no later than Oct. 17, 2025.
How much money will I get from AT&T settlement?
AT&T has agreed to make available two settlement funds: $149 million to settle the claims from the first data incident in March 2024, and $28 million for the second data incident in July 2024.
When will payments be sent?
It is unclear when payments will be sent, but a final approval hearing of the settlement agreement will be held before a judge in the District of Montana on Dec. 3, 2025. At that time, the settlement may be approved and dispersements can go out to affected customers.
Lori Comstock is a New Jersey-based journalist with the Mid-Atlantic Connect Team.