AT&T might owe you $7,500 for that data breach mess. Here's how to get paid. wdstock/Getty Images
Millions of AT&T customers were horrified in 2024 to discover that their personal information had been exposed in a pair of serious data breaches. Following a court case, the company has been ordered to pay $177 million in a substantial settlement. If you're an affected customer, you may be eligible for compensation of up to $7,500.
For all the procrastinators out there, a court just extended the deadline. You now have until Dec. 18, 2025, to submit your claim. That means you only have two weeks left.
If you were affected by one or even both of the breaches, you're eligible for a payout. But this could be your final notice. The deadline is firm, and you don't want to miss this opportunity. Here's everything you need to know about how to file your claim and how much cash you could get.
Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.
What were these data breaches at AT&T?
The two data breaches related to AT&T's current $177 million settlement occurred in 2019 and 2024, although the company didn't acknowledge the 2019 breach until March 2024, weeks after it detected customer data spreading on the dark web.
The 2019 breach involved personal data, including Social Security numbers, birth dates and legal names, and it affected 7.6 million current AT&T customers and 65.4 million former account holders. Soon after the discl
AT&T cybersecurity rating report: https://www.rankiteo.com/company/att
"id": "ATT1764820523",
"linkid": "att",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '73 million (7.6 '
'million current '
'and 65.4 million '
'former account '
'holders)',
'industry': 'Telecommunications',
'location': None,
'name': 'AT&T',
'size': None,
'type': 'Corporation'}],
'customer_advisories': 'Compensation claims open until Dec. 18, '
'2025',
'data_breach': {'data_encryption': None,
'data_exfiltration': 'Yes (dark web)',
'file_types_exposed': None,
'number_of_records_exposed': '73 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security '
'numbers',
'Birth dates',
'Legal names']},
'date_detected': 'March 2024',
'date_publicly_disclosed': 'March 2024',
'description': 'Millions of AT&T customers were affected by two '
'data breaches in 2019 and 2024, leading to the '
'exposure of personal information. AT&T was '
'ordered to pay $177 million in a settlement, '
'with affected customers eligible for '
'compensation up to $7,500.',
'impact': {'brand_reputation_impact': 'Yes',
'conversion_rate_impact': None,
'customer_complaints': None,
'data_compromised': 'Personal information including '
'Social Security numbers, birth '
'dates, and legal names',
'downtime': None,
'financial_loss': '$177 million settlement',
'identity_theft_risk': 'Yes',
'legal_liabilities': 'Yes',
'operational_impact': None,
'payment_information_risk': None,
'revenue_loss': None,
'systems_affected': None},
'initial_access_broker': {'backdoors_established': None,
'data_sold_on_dark_web': 'Yes',
'entry_point': None,
'high_value_targets': None,
'reconnaissance_period': None},
'investigation_status': 'Settled',
'post_incident_analysis': {'corrective_actions': None,
'root_causes': None},
'ransomware': {'data_encryption': None,
'data_exfiltration': None,
'ransom_demanded': None,
'ransom_paid': None,
'ransomware_strain': None},
'references': [{'date_accessed': None,
'source': 'CNET',
'url': None}],
'regulatory_compliance': {'fines_imposed': None,
'legal_actions': 'Court-ordered '
'settlement',
'regulations_violated': None,
'regulatory_notifications': None},
'response': {'adaptive_behavioral_waf': None,
'communication_strategy': 'Public disclosure and '
'settlement announcement',
'containment_measures': None,
'enhanced_monitoring': None,
'incident_response_plan_activated': None,
'law_enforcement_notified': None,
'network_segmentation': None,
'on_demand_scrubbing_services': None,
'recovery_measures': None,
'remediation_measures': None,
'third_party_assistance': None},
'title': 'AT&T Data Breaches Settlement',
'type': 'Data Breach'}