Millions of AT&T customers may be entitled to receive up to $7,500 after the company was ordered to pay $177 million in a settlement related to two major data breaches. The deadline to submit claims has been extended to December 18, 2025, giving customers additional time to apply.
AT&T cybersecurity rating report: https://www.rankiteo.com/company/att
"id": "ATT1764635319",
"linkid": "att",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'incident': {'affected_entities': [{'customers_affected': 'Millions',
'industry': 'Telecommunications',
'location': 'United States',
'name': 'AT&T',
'size': 'Large (multinational '
'corporation)',
'type': 'Telecommunications Company'}],
'customer_advisories': 'Customers advised to submit claims by '
'December 18, 2025, for potential '
'compensation up to $7,500',
'data_breach': {'data_encryption': None,
'data_exfiltration': None,
'file_types_exposed': None,
'number_of_records_exposed': None,
'personally_identifiable_information': 'Likely '
'(given '
'settlement '
'context)',
'sensitivity_of_data': None,
'type_of_data_compromised': None},
'description': 'Millions of AT&T customers may be entitled to '
'receive up to $7,500 after the company was '
'ordered to pay $177 million in a settlement '
'related to two major data breaches. The deadline '
'to submit claims has been extended to December '
'18, 2025, giving customers additional time to '
'apply.',
'impact': {'brand_reputation_impact': 'Potential negative impact '
'due to data breaches and '
'settlement',
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': True,
'downtime': None,
'financial_loss': '$177 million (settlement amount)',
'identity_theft_risk': 'Likely (given customer data '
'exposure)',
'legal_liabilities': '$177 million settlement',
'operational_impact': None,
'payment_information_risk': None,
'revenue_loss': None,
'systems_affected': None},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': None,
'entry_point': None,
'high_value_targets': None,
'reconnaissance_period': None},
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'regulatory_compliance': {'fines_imposed': '$177 million '
'(settlement)',
'legal_actions': 'Class-action lawsuit '
'settlement',
'regulations_violated': None,
'regulatory_notifications': None},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': 'Settlement announcement '
'and extended claims '
'deadline (December 18, '
'2025)',
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'title': 'AT&T Data Breaches Settlement',
'type': ['Data Breach', 'Settlement']}}