Were you caught up in either of the two AT&T data breaches from 2019 or 2024? If so, you might be eligible for part of a $177 million settlement.
According to court documents, the settlement fund consists of $149 million to address a major data leak in 2019, which allowed cybercriminals to exploit the data of former and existing subscribers for years. Last March, AT&T finally confirmed the breach, sparking a wave of class-action lawsuits alleging the company had failed to safeguard the data of 51 million users, including their names, Social Security numbers, and dates of birth.
The rest of the $28 million is meant to address a second incident involving a hacker breaching AT&T’s account with cloud storage provider Snowflake in April 2024. This enabled the cybercriminal to access call and text records for nearly all customers. Another round of class-action lawsuits followed, alleging corporate neglect. However, AT&T said no customer names were included in the stolen information. Law enforcement also arrested the two alleged hackers involved in the breach.
How to Get Your Share of the AT&T Settlement Payouts
You’re eligible for a payout if your data was compromised in one or both of the two data breaches mentioned above. Emails are going out about the settlement; check your spam folders for an email from Kroll Settlement Administration LLC (via [email protected]), which will include the class member ID you’ll need to file a claim.
If you think you’re affected, but haven’t received anything about the settlement, you can also use the contact form on the settlement website or call (833) 890-4930 to double-check.
How Much Money Can You Receive?
The amount you’re entitled to depends on which breach you were impacted by; it could be both.
If Your Data Was Compromised in the 2019 Breach
Those impacted by the 2019 breach, known as the AT&T 1 Settlement Class, can submit a claim for one of two payouts.
-
If you lost money due to the hack in 2019 or later, and have the documentation to prove it, you can request a reimbursement of up to $5,000.
-
Otherwise, you can request to be part of the class-action payout. How much you get will depend on how many people submit claims and what type of data was compromised.
-
If your Social Security number was compromised, you’ll get a Tier 1 Cash Payment. Otherwise, you’ll get a Tier 2 Cash Payment. Whatever the final total is, a Tier 1 payment will be five times the amount of a Tier 2 payment.
-
If Your Data Was Compromised in the 2024 Breach
Those impacted by the 2024 breach, known as the AT&T 2 Settlement Class, can submit a claim for one of two payouts.
-
If you lost money due to the hack on or after April 12, 2024, and have the documentation to prove it, you can request a reimbursement of up to $2,500.
Get Our Best Stories!
A Smart, Bold Take on the Wireless World
By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy
Policy.Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
-
Otherwise, you can request to be part of the class-action payout. How much you get will depend on how many people submit claims.
What if Your Data Was Compromised in Both Breaches?
If your data got caught up in both breaches, you can file two claims. If you’re submitting documentation for a reimbursement, however, the losses need to be different. You can’t submit the same receipts for the $5,000 payout and the $2,500 payout.
How to Submit a Claim
Head to telecomdatasettlement.com and click Submit Claim. You’ll be asked to enter a class member ID and then either your email address, AT&T account number, or your full name. You’ll find the class member ID on the email or postcard you received from AT&T or Kroll Settlement Administration LLC. If you don’t have that number, use the Contact Us form on the settlement website or call (833) 890-4930.
When Is the Deadline to Submit a Claim?
You must submit your claim form online at the settlement website by Dec. 18, 2025.
Recommended by Our Editors
What if I Want to Sue AT&T Individually?
You had to opt out of the settlement class by Nov. 17, 2025, in order to keep your right to bring any other lawsuit against AT&T relating to these hacks. So, that deadline has passed.
What If I Don’t Like the Terms of This Settlement?
You’re out of luck. The deadline to object was also Nov. 17.
What If I Do Nothing?
You get no money and no right to sue AT&T at a later date.
In a statement, AT&T said: “While we deny the allegations in these lawsuits that we were responsible for these criminal acts, we have agreed to this settlement to avoid the expense and uncertainty of protracted litigation. We remain committed to protecting our customers’ data and ensuring their continued trust in us.” The carrier also expects the settlement will receive approval by the end of this year.
About Our Experts
Chloe Albanesius
Executive Editor, News
Experience
I started out covering tech policy in DC for The National Journal, where my beat included state-level tech news and all the congressional hearings and FCC meetings I could handle. I later covered Wall Street trading tech before switching gears to consumer tech. I now lead PCMag’s news coverage and manage our how-to content.
Getting my start in DC means I still have a soft spot for tech policy; Congressional hearings can sometimes be as entertaining as a Bravo reality show, for better or worse. But PCMag is all about the technology we use every day, as well as keeping an eye out for the trends that will shape the industry in the years ahead (or flop on arrival). I’ve covered the rise of social media, the iOS vs. Android wars, the cord-cutting revolution that’s now left us with hefty streaming bills, and the effort to stuff artificial intelligence into every product you could imagine. This job has taken me to CES in Vegas (one too many times), IFA in Berlin, and MWC in Barcelona. I also drove a Tesla 1,000 miles out west as part of our Best Mobile Networks project. Of late, my focus is on our hard-working team of reporters at PCMag, guiding and editing their robust coverage of satellite internet efforts, electric vehicles, the latest cyberattacks, AI, and more.
I wouldn’t consider myself an early adopter; I hung on to my iPhone XR until I traded up to an iPhone 15. My aging Apple Watch Series 4 was finally replaced by a Series 10 last year. On the desktop, it’s all Windows for me. I’ve tried macOS, but alas it is not for me.
Latest By Chloe Albanesius
Read Full Bio
Michael Kan
Senior Reporter
Experience
I’ve been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. Earlier this year, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how President Trump’s tariffs will affect the industry. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.
Read Full Bio
