Fall ResetAmazon USFall reset deals: check better picks before checkoutAmazon US: today's deals, useful picks and quick comparisons.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanFall ResetAmazon USWork and home upgrades are worth comparing todayAmazon US: today's deals, useful picks and quick comparisons.See Picks×
Skip to content
Blog

AT&T Faces Lawsuits Over Data Breach Affecting 73 Million Customers: What to Know

By TheFinanceBase Team9 min read

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

Yes—the lawsuits are real. The often-repeated “73 million customers” figure refers primarily to AT&T’s first data incident disclosed on March 30, 2024: approximately 7.6 million current account holders and 65.4 million former account holders. A separate incident disclosed in July 2024 involved call- and text-related records.

The cases were consolidated in federal court, and a proposed settlement reportedly worth $177 million covers both incidents. However, the claim deadline was December 18, 2025, and the latest accessible update on the official settlement website says the court had not yet decided whether to grant final approval after the January 15, 2026 hearing.

The short answer

  • The litigation is genuine: the cases are consolidated as In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E, in the U.S. District Court for the Northern District of Texas.
  • “73 million” is a rounded figure: it combines approximately 7.6 million current and 65.4 million former account holders associated with the first incident.
  • There were two incidents: the first involved a data set released on the dark web; the second involved certain call- and text-related information downloaded from an AT&T workspace on a third-party cloud platform.
  • No payout is guaranteed: the proposed terms describe pro-rata payments and documented-loss benefits, not an automatic $5,000 payment for every affected person.
  • The claim deadline has passed: the official materials list December 18, 2025. Check the official administrator site for any later court-approved reopening or deficiency process.

What happened in the first AT&T data incident?

On March 30, 2024, AT&T said a data set released on the dark web appeared to contain AT&T-specific information. The company said the records appeared to originate from 2019 or earlier and involved approximately 7.6 million current account holders and 65.4 million former account holders.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That means the public disclosure date was 2024, but the underlying records may have been much older. The 73-million headline should not be read as proof that 73 million people were newly hacked in March 2024 or that every person had the same information exposed.

AT&T said it was still assessing the source of some information, including Social Security numbers. Its statement said the company did not have evidence at that point that unauthorized access to its systems had resulted in exfiltration of the data set. The company also said it was investigating and offering credit monitoring where applicable. Read AT&T’s March 30 statement for its account of the disclosure.

The plaintiffs’ consolidated complaint presents a different perspective. It alleges that the data had circulated online for years and that AT&T failed to investigate or notify affected customers promptly. The complaint also alleges inadequate security, deficient data-retention practices, and violations of contractual, statutory, and common-law duties. Those are allegations—not findings that AT&T has been held liable for those violations.

What information may have been involved?

For the first incident, the settlement materials identify possible combinations of:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Names and addresses
  • Telephone numbers and email addresses
  • Dates of birth
  • Account passcodes
  • Billing account numbers
  • Social Security numbers

Not every affected person necessarily had every listed data element exposed. In particular, the existence of the 73-million figure does not establish that everyone’s Social Security number was included.

The July 2024 incident was separate

On July 12, 2024, AT&T disclosed a second incident. According to the settlement materials, hackers illegally downloaded certain customer data from an AT&T workspace hosted on a third-party cloud platform identified in the materials as Snowflake.

The information described for this incident was materially different from the personal-identification information associated with the first incident. It may have included:

  • Customer telephone numbers
  • Telephone numbers with which customers interacted
  • Counts of interactions
  • Aggregate call durations by day or month
  • Cell-site identification numbers for a small subset

This second incident should not automatically be described as another Social Security-number breach or added to the 73-million figure. The settlement treats AT&T 1 and AT&T 2 as separate incidents with different class definitions and data elements.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The involvement of a third-party cloud workspace also does not, by itself, establish legal fault by Snowflake or AT&T. Responsibility is disputed and should be distinguished from what the settlement materials describe as the technical setting of the incident.

What lawsuits were filed?

Lawsuits followed the March 2024 announcement in state and federal courts. In June 2024, the federal cases were consolidated before Judge Ada E. Brown in the Northern District of Texas under MDL No. 3:24-md-03114-E. The court’s case information is available on the Northern District of Texas MDL page.

Multidistrict litigation, or MDL, combines related federal cases for coordinated proceedings. It does not mean that every claim has been proven, and it is not itself a judgment against AT&T.

The amended consolidated complaint alleges that AT&T failed to use reasonable security measures, did not properly investigate the earlier appearance of the data, retained information that should have been deleted, and delayed notification. It also asserts contractual, statutory, and common-law claims. You can review the amended consolidated complaint, keeping in mind that pleadings describe one side’s allegations.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is the proposed settlement?

In March 2025, the parties agreed to settle the two proceedings together. News reports described the proposed aggregate settlement as worth approximately $177 million. That is the total settlement value—not a sum that will be divided equally among 73 million people.

The proposed fund would be reduced by valid claim payments, administrative expenses, court-awarded attorney fees, service awards, and other approved costs. Individual payments would depend on the number and value of valid claims and on which benefit category applies.

Who could qualify?

The proposed settlement has two principal classes:

  • AT&T 1 class: U.S. living persons whose qualifying data elements were included in the first incident announced on March 30, 2024.
  • AT&T 2 class: AT&T account owners or line/end users whose qualifying telephone-number or call-record data was involved in the second incident.

Some people may fall within both classes. Being a current or former AT&T customer alone does not automatically establish eligibility. The administrator’s records and the settlement’s precise definitions control.

How the proposed benefits would work

AT&T 1 documented-loss payment

A qualifying claimant could seek up to $5,000 for documented losses occurring in 2019 or later, provided the claimant submits documentation showing that the losses are fairly traceable to the first incident. “Up to $5,000” is a ceiling, not a guaranteed award.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AT&T 1 tier payment

A claimant could instead qualify for a pro-rata payment from the net settlement fund. Tier 1 applies when the Social Security number was included; Tier 2 applies when qualifying data was included but the Social Security number was not. The settlement website says a Tier 1 payment is five times the Tier 2 payment, subject to the settlement’s conditions and available funds.

AT&T 2 documented-loss payment

A qualifying claimant could seek up to $2,500 for documented losses occurring on or after April 14, 2024, if the losses can be traced to the second incident.

AT&T 2 tier payment

A qualifying AT&T 2 account owner may be eligible for a pro-rata Tier 3 payment. The eventual amount would depend on the number of valid claims and deductions from the fund.

Is the AT&T settlement finally approved?

The court granted preliminary approval on June 20, 2025. After deadlines were extended, the official schedule listed:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Event Date
Preliminary approval June 20, 2025
Opt-out deadline November 17, 2025
Objection deadline November 17, 2025
Claim deadline December 18, 2025
Final approval hearing January 15, 2026

The latest accessible update on the official settlement website says the hearing took place but the court had not yet decided whether to approve the settlement. Therefore, do not assume that the settlement is final, that payments are being issued, or that any particular amount is guaranteed. For court orders and filed documents, use the settlement documents page and the federal court’s MDL page.

The proposed settlement is not an admission that AT&T violated the law. A settlement can resolve disputed claims without a court finding of liability.

Can people still file a claim?

Based on the latest official materials provided here, the claim deadline—December 18, 2025—has passed. Do not rely on an unofficial law-firm page promising that claims are still open.

Instead, check the official settlement documents for a later order, reopening, deficiency process, or other administrator notice. A late claim should not be treated as accepted unless the administrator or court expressly says so.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What affected customers should do now

  1. Verify notices through official sources. Start with telecomdatasettlement.com, the court-authorized settlement site identified in the case materials.
  2. Preserve records. Keep breach notices, settlement correspondence, account statements, identity-theft reports, and receipts for losses you believe may be relevant.
  3. Change reused credentials. Replace exposed AT&T account passcodes and any password reused on other services. Use unique passwords and a password manager if helpful.
  4. Turn on multifactor authentication. Enable it for email, financial accounts, AT&T accounts, and other important services wherever available.
  5. Review financial activity. Check bank, credit-card, wireless, and email accounts for unfamiliar activity. Contact the provider through a trusted phone number or website if you find anything suspicious.
  6. Consider a credit freeze. A freeze is free and can help prevent new-credit accounts from being opened in your name. Use the official pages for Equifax, Experian, and TransUnion.
  7. Get your reports from the official source. Use AnnualCreditReport.com, rather than a lookalike site.
  8. Report identity theft if it occurs. The federal recovery resource is IdentityTheft.gov. AT&T also provides account-safety guidance at AT&T Account Safety.

Be cautious with paid monitoring

You do not need to buy a credit-monitoring or identity-protection service to participate in the settlement or take basic protective steps. A free credit freeze and regular account review may be sufficient for some people.

Paid services can differ in the breadth of credit-bureau monitoring, dark-web alerts, identity restoration, stolen-funds reimbursement, household coverage, and password-management features. However, monitoring cannot remove leaked information from the internet, and a dark-web alert does not prove that a particular fraud event came from AT&T. Compare current terms directly on the provider’s official website before paying, and do not assume any vendor is endorsed by AT&T, the court, or the settlement administrator.

What does participating in the settlement mean?

If the settlement becomes final and a person remains in the class, that person generally releases covered claims against AT&T-related defendants and other entities covered by the agreement, including Snowflake for the covered incidents. The practical consequence is important: accepting a settlement benefit—or remaining in the class without opting out—can affect the ability to pursue released claims separately.

Opting out, objecting, and participating are different choices with different consequences. People with substantial documented losses, or anyone considering exclusion from the settlement, may wish to consult an independent lawyer who is not directing them to a particular claim service. This is general information, not individualized legal advice.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to spot settlement scams

  • Do not treat an unsolicited message promising an automatic $5,000 payment as proof that you qualify.
  • Do not click links in unexpected texts or emails before verifying the domain independently.
  • Be skeptical of requests for banking credentials, passwords, gift cards, or urgent payment.
  • Navigate directly to the official settlement website and compare any notice with the information posted there.
  • Remember that the proposed terms require documentation for maximum documented-loss payments; they do not promise $5,000 to every affected customer.

Frequently Asked Questions

Does the 73-million figure include former AT&T customers?

Yes. The figure is rounded from approximately 7.6 million current account holders and 65.4 million former account holders associated with the first incident.

Was everyone’s Social Security number exposed?

No. The materials describe varying combinations of data elements. A person’s eligibility and the specific data involved depend on the administrator’s records and the settlement definitions.

Is the reported $177 million settlement final?

The latest accessible official settlement update says final approval remained unresolved after the January 15, 2026 hearing. Check the official settlement website for a later court order.

What should I do if a message says I am guaranteed $5,000?

Verify it through the official settlement website. The proposed $5,000 figure is a maximum for qualifying, documented losses—not an automatic payment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Written by TheFinanceBase Team

The Team behind TheFinanceBase.

Add your note

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.