AT&T Data Breach Settlement: How to File Your Claim and How Much You Can Get
Luglio 01, 2026 • security
The AT&T data breach settlement covers millions of customers whose personal data was exposed in multiple major security incidents between 2019 and 2024. If you were an AT&T customer during those periods, you may be entitled to compensation — and the process to file a claim is straightforward.
This guide explains what happened, who qualifies, how much you can receive, and exactly how to file your claim before the deadline.
What Is the AT&T Data Breach Settlement?
AT&T suffered a series of significant data breaches that exposed the personal information of tens of millions of current and former customers. The company has entered settlement agreements to compensate affected individuals without admitting wrongdoing.
The primary incidents covered include:
- The 2021 AT&T data leak — In 2021, data belonging to approximately 70 million AT&T customers surfaced on a hacking forum. The exposed data included names, addresses, phone numbers, Social Security numbers, and dates of birth. AT&T initially denied the breach but confirmed it in 2024 when the same dataset re-emerged on a dark web marketplace.
- The 2022 AT&T vendor breach — Customer data was exposed through a third-party vendor (Xplore Technologies), including account information for millions of customers.
- The 2024 AT&T call records breach — In July 2024, AT&T disclosed that nearly all of its wireless customers had call and text metadata (phone numbers contacted, call duration, cell site locations) stolen by hackers exploiting AT&T’s Snowflake cloud storage account. This breach affected approximately 110 million accounts.
Who Qualifies for the AT&T Data Breach Settlement?
Eligibility depends on the specific breach and settlement:
- Current AT&T customers who received a notification letter or email from AT&T informing them of the breach.
- Former AT&T customers who had an active account during the breach period (2019–2024 depending on the settlement).
- Customers whose Social Security numbers, financial data, or call records were exposed are typically eligible for higher compensation tiers.
You do not need to prove you suffered identity theft or fraud to file a basic claim. Simply having had your data exposed qualifies you for base-level compensation. Claims of documented harm (fraudulent accounts opened, identity theft recovery costs) qualify for higher payouts.
How Much Can You Get from the AT&T Data Breach Settlement?
Compensation varies based on the breach and your level of documented harm:
| Claim Type | Estimated Payout |
|---|---|
| Basic claim (data exposed, no documented harm) | $50 – $150 |
| Time spent dealing with breach (up to 3 hours at $25/hr) | Up to $75 |
| Documented out-of-pocket losses (credit monitoring, identity theft costs) | Up to $2,500 per incident |
| Extraordinary harm (extended identity theft, significant financial loss) | Up to $10,000+ |
Actual payout amounts depend on the total number of valid claims filed. The settlement fund has a fixed total, so individual payouts are divided proportionally among all claimants.
How to File an AT&T Data Breach Settlement Claim
- Find the official settlement website. Search for “AT&T data breach settlement claim” on Google and look for the official claims administrator site — typically hosted at a domain ending in .com with “settlement” in the name. Verify it matches any notification letter or email AT&T sent you.
- Gather your information:
- Your AT&T account number (found on any AT&T bill)
- The phone number associated with your AT&T account during the breach period
- Your email address on file with AT&T
- Any notice ID from AT&T’s breach notification letter (if you received one)
- Choose your claim type: Select whether you’re filing for basic data exposure, time spent responding to the breach, out-of-pocket losses, or extraordinary harm. Higher claim categories require documentation.
- Provide documentation for enhanced claims: If claiming reimbursement for expenses, include receipts, bank statements, credit reports showing fraudulent activity, or correspondence with identity theft recovery services.
- Submit before the deadline. Settlement deadlines are strictly enforced. Late claims are typically rejected. Check the official settlement site for the current filing deadline.
- Keep your confirmation number. After submitting, save the confirmation email and claim ID. You’ll need this if your claim status is questioned.
The AT&T Data Breach Settlement Deadline
Deadlines for each AT&T settlement vary by incident. The 2024 class action settlements related to the Snowflake breach and the 2021 Social Security number exposure have different timelines. Check the official settlement administrator’s website for the current deadline — missing it forfeits your right to claim compensation while still binding you to the settlement terms.
I caricabatterie non certificati possono essere più economici ma possono rappresentare rischi per il tuo dispositivo e potenzialmente annullare If you opt out of the settlement, you preserve your right to sue AT&T independently but give up your claim to settlement funds. The opt-out deadline is separate from the claims deadline.
Watch Out for AT&T Settlement Scams
Fraudsters are actively exploiting the AT&T breach by sending fake settlement claim emails and texts. Red flags include:
- Emails asking for your Social Security number or bank account details upfront
- Texts claiming you’ve already been approved for a specific dollar amount and need to “verify” to receive it
- Websites with URLs that include “att” but are not the official settlement site
- Requests for a “processing fee” to receive your settlement payment
Legitimate settlement administrators never charge fees, never ask for your banking credentials, and never contact you via unsolicited text message demanding immediate action.
What Information Was Exposed in the AT&T Breaches?
The data exposed varies by breach:
| Breach | Data Exposed | Customers Affected |
|---|---|---|
| 2021 dark web leak | Name, address, phone, SSN, date of birth, email | ~70 million |
| 2022 vendor breach | Account data, call records | ~9 million |
| 2024 Snowflake breach | Call/text metadata, cell site locations | ~110 million |
Steps to Protect Yourself After the AT&T Breach
Filing a claim is one step. Protecting yourself from ongoing harm is equally important:
- Freeze your credit at all three bureaus — Equifax, Experian, and TransUnion. A credit freeze is free, does not affect your credit score, and prevents anyone from opening new accounts in your name. This is the most effective single action you can take.
- Set up fraud alerts. A fraud alert (free, lasts one year) requires lenders to verify your identity before opening new credit in your name. Equifax, Experian, and TransUnion automatically notify each other when you file one.
- Monitor your credit reports. Check all three reports at annualcreditreport.com for any accounts or inquiries you don’t recognize.
- Watch for SIM swap attacks. With your phone number exposed, scammers may try to transfer your number to a SIM card they control. Contact AT&T to add a passcode or “number lock” to your account.
- Be alert for phishing. With your email, name, and address exposed, expect highly targeted phishing emails that reference your real information to appear legitimate.
Domande Frequenti
How do I know if I’m included in the AT&T data breach settlement?
If you were an AT&T customer between 2019 and 2024 and your data was exposed, you are likely included. AT&T sent notification emails and letters to affected customers. If you didn’t receive one, you can still check your eligibility by entering your information on the official settlement website.
How long does it take to receive the AT&T settlement payout?
After the claims deadline passes, the court must approve the final settlement distribution. This typically takes 6–18 months from the deadline. Payments are usually made by check or digital payment — claimants select their preference when filing.
Do I need a lawyer to file an AT&T data breach settlement claim?
No. The claims process is designed to be completed by individuals without legal assistance. Class action attorneys have already negotiated the settlement on behalf of the class. Filing is free through the official settlement website.
Can I file a claim for multiple AT&T breaches?
Yes, if you were affected by multiple incidents. Each settlement typically has its own claim form. Check each settlement’s eligibility criteria and file separately for each one you qualify for.
What if I already accepted a settlement payment from AT&T?
If AT&T offered you direct compensation (such as credit monitoring services) in exchange for releasing your claims, you may have already waived your right to participate in the class action. Review any documents AT&T sent you and consult a consumer protection attorney if you’re unsure.
Is the AT&T settlement legitimate?
Yes. Multiple AT&T data breach class action settlements have been filed in federal courts across the United States and are overseen by federal judges. Only use the official settlement administrator’s website — linked in AT&T’s notification letters or verifiable through court records — to file your claim.

sicurezza
admin è una redattrice senior per Government Technology. In precedenza ha scritto per PYMNTS e The Bay State Banner e ha conseguito una laurea in scrittura creativa alla Carnegie Mellon. Risiede fuori Boston.