Last day to claim up to $7,500 in AT&T data breach settlement
Deadline Dec. 18; settlement provides up to $7,500 per claimant after two major breaches, with a total payout of $177 million to affected customers.
Dec. 18 is the deadline for US AT&T customers to file claims in a data breach settlement that could pay up to $7,500 per eligible person. The agreement resolves lawsuits accusing AT&T of failing to prevent two breaches, one in 2019 and another in 2022, that exposed customers’ personal information. The total payout to victims is $177 million.
The 2019 breach involved sensitive data such as Social Security numbers, birth dates and legal names. It was not disclosed until March 2024, after customer data — including addresses, Social Security numbers and passwords — had circulated on the dark web, USA Today reported. In all, 7.6 million current AT&T customers and 65.4 million former account holders were affected.
The second breach involved unauthorized access to customer phone records from 2022 and was disclosed in 2024. The incident prompted a settlement after multiple lawsuits, with the parties agreeing to a settlement in March 2025. AT&T has denied wrongdoing but has agreed to pay $177 million to victims: $149 million for those impacted by the 2019 breach and $28 million for victims of the 2022 breach. To file, customers should visit the Kroll Settlement Administration website and enter their Class Member ID, which is typically sent by email from Kroll. AT&T has said it denies the allegations in both cases, but the settlements are designed to avoid the expense and uncertainty of protracted litigation. 833-890-4930 is available for questions. 
Claimants impacted by the 2019 breach may be eligible for up to $5,000 if they can demonstrate documented losses. If they cannot prove losses, they may receive either Tier 1 or Tier 2 cash payments depending on whether their Social Security number was included in the breach, with Tier 1 payments being five times the amount of Tier 2. Those affected by the July 2024 disclosure of the 2022 breach are eligible for up to $2,500 if they can demonstrate documented losses. For claimants who cannot prove losses for the 2022 breach, a pro rata share may be available from the remaining funds after administration costs and claims are issued. According to the settlement website, victims of both breaches can be eligible for as much as $7,500 in compensation.
Claim forms can be completed online or printed and mailed to the AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC; P.O. Box 5324; New York, NY 10150-5324. Claims must be filed by Dec. 18 to be considered. Those uncertain about eligibility can call 833-890-4930 for guidance. For reference, the settlement totals $177 million, with $149 million allocated to the 2019 breach and $28 million to the 2022 breach. The Kroll settlement site notes that claimants can provide documentation of losses stemming from either or both breaches to maximize their potential payout.
The AT&T settlements come as part of ongoing efforts to compensate consumers for data breaches involving large carriers. AT&T has repeatedly denied wrongdoing but has agreed, in the interest of resolving the disputes and avoiding lengthy litigation, to the payment terms outlined in the agreement. The case highlights the continuing risk of personal data exposure in the telecommunications sector and the role of class-action settlements in providing redress to affected customers.