AT&T

AT&T agreed to a **$177 million class-action settlement** following two alleged data breaches where **sensitive customer data was exposed and released on the dark web**. The breaches compromised personal and financial information, putting millions of customers at risk of identity theft, fraud, and financial loss. Affected individuals were advised to take immediate protective measures, including changing passwords, enabling multi-factor authentication, monitoring accounts for suspicious activity, and reporting potential identity theft to the Federal Trade Commission. The breach underscored the growing frequency and severity of cyber incidents targeting major corporations, highlighting the need for robust data protection and consumer vigilance. AT&T’s settlement reflects the significant financial and reputational consequences of failing to safeguard customer data, while also offering affected users resources like credit monitoring to mitigate long-term harm.

Source: https://www.usatoday.com/story/money/2025/11/04/bbb-tips-data-breach/87089722007/

TPRM report: https://www.rankiteo.com/company/att

"id": "att3502335110525",
"linkid": "att",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Telecommunications',
                        'location': 'United States',
                        'name': 'AT&T',
                        'type': 'Telecommunications Company'}],
 'customer_advisories': ['Confirm breach legitimacy by contacting AT&T '
                         'directly.',
                         'Update passwords and enable MFA for affected '
                         'accounts.',
                         'Monitor financial accounts and credit reports for '
                         'unauthorized activity.',
                         'Report identity theft to the FTC via '
                         'IdentityTheft.gov.',
                         'Utilize free credit monitoring services if provided '
                         'by AT&T.'],
 'data_breach': {'data_exfiltration': 'Yes (data released on the dark web)',
                 'personally_identifiable_information': 'Likely (based on '
                                                        'context)',
                 'sensitivity_of_data': 'High (personally identifiable '
                                        'information likely included)',
                 'type_of_data_compromised': 'Sensitive customer data'},
 'description': 'AT&T is set to pay a $177 million class action settlement '
                'after two alleged data breaches where sensitive customer data '
                'was released on the dark web. The breaches exposed customer '
                'data, prompting advisories for affected individuals to secure '
                'their personal information and monitor for identity theft.',
 'impact': {'brand_reputation_impact': 'High (due to public disclosure and '
                                       'settlement)',
            'data_compromised': 'Sensitive customer data (details unspecified)',
            'financial_loss': '$177 million (settlement amount)',
            'identity_theft_risk': 'High (customer data exposed on dark web)',
            'legal_liabilities': '$177 million class action settlement'},
 'initial_access_broker': {'data_sold_on_dark_web': 'Yes (customer data '
                                                    'released on dark web)'},
 'post_incident_analysis': {'corrective_actions': '$177 million settlement to '
                                                  'affected customers'},
 'ransomware': {'data_exfiltration': 'Yes (data released on the dark web)'},
 'recommendations': ['Verify breach notifications directly with the company to '
                     'avoid scams.',
                     'Change passwords for affected accounts and enable '
                     'multi-factor authentication (MFA).',
                     'Monitor bank statements, credit card activity, and '
                     'credit reports for suspicious activity.',
                     'Consider placing a credit freeze or fraud alert with '
                     'credit bureaus.',
                     'Report identity theft to the Federal Trade Commission '
                     '(IdentityTheft.gov).',
                     'Take advantage of free credit monitoring or identity '
                     'protection services if offered by the breached company.'],
 'references': [{'source': 'Better Business Bureau (BBB)',
                 'url': 'https://www.bbb.org/article/news-releases/25677-how-to-protect-your-information-after-a-data-breach'},
                {'source': 'AT&T Class Action Settlement News'}],
 'regulatory_compliance': {'fines_imposed': '$177 million (settlement, not a '
                                            'fine)',
                           'legal_actions': 'Class action lawsuit'},
 'response': {'communication_strategy': 'Public disclosure and customer '
                                        'advisories (e.g., Better Business '
                                        'Bureau recommendations)',
              'recovery_measures': 'Class action settlement ($177 million)'},
 'stakeholder_advisories': 'Better Business Bureau (BBB) provided consumer '
                           'protection guidelines post-breach.',
 'title': 'AT&T Data Breach Settlement',
 'type': ['Data Breach', 'Class Action Settlement']}