AT&T to Pay $177 Million to Data Breach Victims

AT&T is slated to pay $177 million in compensation to customers affected by two major data breaches that exposed sensitive personal information.

The first incident, which began as early as 2019, involved a breach claimed by the hacking group Shiny Hunters. Although initially denied by AT&T, data of over 70 million people, including decipherable login passcodes, was posted for sale in March 2024. AT&T finally confirmed the leak on April 2, 2024, affecting 73 million current and former customers.

A subsequent breach, revealed in July 2024, impacted nearly 109 million U.S. customers. This breach compromised call and text records from 2022 through a hack of AT&T's cloud storage provider, Snowflake.

Following these events, AT&T faced multiple class-action lawsuits. A U.S. District Judge has now granted preliminary approval to a settlement, offering compensation to affected individuals.

Who Qualifies and How to Claim: Current or former AT&T customers whose data was exposed in either breach are eligible. Maximum payouts are up to $5,000 for the 2019 breach and $2,500 for the 2024 breach, with priority given to those who can document direct damages. Remaining funds will be distributed even without proof of damages.

Notices to eligible claimants will be sent by August 4, 2025. The deadline to submit claims is November 18, 2025, with payments expected to begin in early 2026 after final court approval on December 3, 2025.

To check if your data was exposed, use Malwarebytes’ free Digital Footprint Portal. Simply enter your email address to see if your information was affected. Look for a "pink bubble" indicating exposure.

Stay vigilant against cybersecurity risks and consider identity protection for your digital well-being.