In this modern digital landscape, most people are still unaware of the importance of data security. AT&T, one of the most successful companies in the United States, faced two massive data breaches.
This AT&T data breach in 2019 and 2024 exposed personal information for over 180 million customers. This led them toward a $177 million class-action settlement approved in June 2025.
Now the point is that each customer can claim $5,000 for these losses. And if you’re a current or former AT&T customer, you also have the opportunity to claim that flat-rate payment.
This claiming process began on August 4, 2025, and its deadline is November 18, 2025.
The 2019 AT&T Data Breach
In March 2024, AT&T confirmed that a data breach had affected the data of around 7.6 million current and 65.4 million former customers in 2019.
Hackers accessed all of the confidential and sensitive data of the customers. This data includes names, Social Security numbers, addresses, and dates of birth, which appeared on the dark web.
A security researcher later found that stolen passcodes were easily decrypted, prompting AT&T to reset customer passcodes.
The 2024 Snowflake Breach
AT&T disclosed that in 2024, a second data breach involved its third-party cloud provider, Snowflake. In this data breach, it compromized the call and text logs of around 109 million customers from 2022.
The exposed data contained phone numbers and the duration of calls. Although there were no direct associations with names, this raises concerns about using the information in the wrong way.
Such violations gave rise to more than 50 cases, most of which are concentrated in the Northern District of Texas, and failure of AT&T to take reasonable care of customer data.
For a total of $177 million, which includes $149 million to refer to the 2024 hack and $28 million to address the 2019 hack, at the settlement, AT&T does not acknowledge any illegal practice.
Who Is Eligible for the Settlement?
There is an eligibility criterion for customers who want to claim their payment. These eligibility criteria are based on multiple factors.
Eligibility for the AT&T 1 Settlement Class
First, keep in mind that you are eligible if your personal data, such as names, addresses, or Social Security numbers, were compromised in the 2019 breach, as mentioned on MorningStar.
This covers 73 million current and former customers in the U.S.
Eligibility for the AT&T 2 Settlement Class
You can also claim if you were an AT&T account owner, line user, or end user. Because your call or text data may also get accessed in the 2024 Snowflake breach. And if yes, then you are also eligible to claim that payment.
This affects approximately 109 million customers.
Overlap Class Members
If both breaches affected you, you can file claims for both, but you must provide unique documentation for each. Here is an example: losses from identity theft tied to the 2019 breach can’t be reused for the 2024 claim.
How Much Can You Claim?
Before proceeding toward how to claim your payments, you have to identify what type of payment you are gonna claim. You have to make sure that the type of information that was breached about you and your payment will be according to that.
Documented Loss Payments
- 2019 Breach: You can claim up to $5,000 for losses like identity theft, fraud, or credit monitoring costs. This will happen if you provide proof (e.g., receipts, bank statements). Losses must have occurred in 2019 or later.
- 2024 Breach: This is up to $2,500 for losses linked to the Snowflake incident, incurred after April 14, 2024, with similar documentation required as mentioned on MalwareBytes.
Flat-Rate Payments
If you didn’t suffer direct losses, you can still claim a tiered payment:
- Tier 1 (2019 Breach): Higher payments for those whose Social Security numbers were exposed.
- Tier 2 (2019 Breach): For those with other compromised data (e.g., names, addresses).
- Tier 3 (2024 Breach): Equal shares from the $28 million fund for affected customers, as mentioned in PRNewswire.
Payments are rated based on the number of claims, so exact amounts vary. Some may also receive up to 24 months of free credit monitoring.
California residents could claim up to $750 under the California Consumer Privacy Act (CCPA).
How to File a Claim for AT&T Data Breach
Here’s a step-by-step guide:
- First, you have to fill out this form and also retain one copy of it for your records.
- After that, you have to mail two copies of this form and your check or money order to the American
Arbitration Association Case Management Center.
- Consult Section C-8 of the Supplementary Procedures for Consumer-Related Disputes for the appropriate fee.
- For having the Information regarding the nearest Case Management Center and the appropriate fee, visit www.adr.org, or you can also do that by calling AAA Customer Service at (800) 778-7879.
- Make sure that your check or money order is payable to the American Arbitration
Association.
- Send a copy of this form and of your check or money order to the Office for Dispute.
Resolution, AT&T, 1025 Lenox Park Blvd., Atlanta, GA 30319.
- Upon receipt, AT&T will compensate you for your fee if your claim is for less than
$75,000 in damages.
