AT&T Data Breach Affects at Least 73 Million Users in the U.S.

Updated August 13, 2025

AT&T reached a $177 million settlement over two 2024 data breaches that exposed personal information for up to 182 million people — here is what was leaked and how the payouts worked.

Unsplash

By Steve Levine

Editor-in-Chief

AT&T has agreed to a $177 million settlement to resolve claims from two massive data breaches in 2024 that exposed the personal information of up to 182 million people, with some affected by both incidents. The first breach, announced in March 2024, compromised sensitive data like names, Social Security numbers, and account details for about 73 million customers, while the second, disclosed in July 2024, involved call and cell site data for around 109 million customers.

Eligible class members can claim up to $5,000 for documented losses from the first breach or up to $2,500 from the second, with payouts also available as a pro rata share of each settlement fund ($149 million for Breach 1 and $28 million for Breach 2). Claims must be filed by November 18, 2025, and proof such as a notice ID or account number will be required. Settlement notifications will be sent between August and October 2025, and payments are expected in early 2026. You can learn how to file a claim here.

Status Settlement Claims Closed AT&T $177M data breach settlement · claim deadline passed November 18, 2025

Claim Deadline November 18, 2025 (Passed)

Estimated Payout Up to $5,000 documented losses (Breach 1); up to $2,500 (Breach 2); otherwise pro rata cash

Proof Required Yes a notice ID or account number was required to file

AT&T has recently disclosed a massive breach potentially affecting 73 million AT&T customers, notifying a substantial number of both current and former customers regarding compromised account information that surfaced on the dark web last month. While the exact count of affected individuals remains undisclosed by the company, legal filings with the Maine Attorney General's office indicate 51.2 million accounts were impacted, while AT&T's official website suggests the number could be as high as 73 million. The compromised data encompassed a variety of personal details such as:

• Full names,
• Email addresses,
• Mailing addresses,
• Phone numbers,
• Social security numbers (PII)
• Dates of birth,
• AT&T account numbers,
• Passcodes or "Pins"

AT&T clarified that personal financial information and call history seemed untouched by the breach. AT&T has also shared that the exposed consumer data pertained to accounts dating back to June 2019 or earlier.

AT&T's disclosure further specified that out of the 73 million affected customers, 7.6 million were current customers, while 65.4 million were former clients. In response to the breach, AT&T has initiated measures like resetting account PINs for current customers and informing both current and former clients via mail. The discrepancy between the numbers provided to the Maine Attorney General's office (51.2 million consumers affected) and those publicly listed on AT&T's website (73 million consumers affected) remains unexplained.

While the compromised passcodes were stored in an encrypted format susceptible to decryption, there remains some risk for consumers who may have had their data leaked in the data breach. For more information on how you can take steps to protect your information, learn more here.

AT&T has not yet shared the data breach's origins or the prolonged delay of over two years in confirming the data's ownership from a data leak from a couple years ago that has been confirmed to belong to AT&T consumers as well.

Given the extended duration during which the data has been accessible, the anticipated impact of the recent publication is expected to be relatively minimal. Nevertheless, individuals who currently or previously held AT&T accounts should remain vigilant against potential scams exploiting the leaked data. In response to the breach, AT&T is extending a gesture of goodwill by offering one year of complimentary identity theft protection.

Often there are class action lawsuits filed following data breaches, such as these current ongoing data breach investigations,which may lead to significant compensation. Make sure to stay up to date as to future class action filings revolving around this massive AT&T breach. AT&T has also previously been involved in a $60 million data throttling open class action settlement, as well as a massive outage that resulted in $5 credits to affected customer accounts.

Free settlement alerts

Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.

Filing Class Action Settlement Claims

Please note that your claim form will be rejected if you submit a settlement claim for payout with any fraudulent information. By providing this information and your sworn statement of its veracity, you agree to do so under the penalty of perjury. You would also be harming others that actually qualify for the class action settlement. If you are not sure whether or not you qualify for this class action settlement, visit the class action administrator's website below. OpenClassActions.com is only providing information and is not a class action administrator or a law firm. OpenClassActions is a participant in the Amazon affiliate advertising program and this post may contain affiliate links, which means we may earn a commission or fees if you make a purchase via those links.

For more open class actions keep scrolling below.