AT&T faced two major data breaches in 2024, exposing sensitive information of millions of customers. The first breach, disclosed in March, compromised the personal data—including birth dates and Social Security numbers—of **73 million current and former account holders**, with the leaked dataset surfacing on the dark web. The second breach, announced in July, exposed call and text records of **nearly all** its cellular customers. These incidents led to consolidated class-action lawsuits, culminating in a proposed **$177 million settlement** ($149M for the first breach class, $28M for the second). Eligible customers can claim up to **$7,500** in compensation, contingent on documented losses traceable to the breaches. The settlement awaits final court approval (scheduled for **December 3, 2025**), with payouts delayed pending potential appeals and claim processing. The breaches underscore severe risks to customer privacy, financial security, and trust in AT&T’s data protection measures.
Source: https://www.cbsnews.com/news/att-data-breach-settlement-kroll-7500-how-to-file-claim/
TPRM report: https://www.rankiteo.com/company/att
"id": "att732081425",
"linkid": "att",
"type": "Breach",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': ['73 million (March 2024 breach)',
"'Nearly all' cellular "
'customers (July 2024 breach)'],
'industry': 'Telecommunications',
'location': 'United States',
'name': 'AT&T',
'size': 'Large (millions of customers)',
'type': 'Telecommunications'}],
'customer_advisories': {'claim_deadline': '2025-11-18',
'eligibility_check': 'Call (833) 890-4930 or check '
'email from '
"'[email protected]'",
'payment_timeline': 'Earliest possible payment in '
'December 2025 (pending court '
'approval and appeals)',
'rights_waiver': 'Filing a claim waives the right to '
'sue AT&T'},
'data_breach': {'data_exfiltration': 'Yes (data found on the dark web for '
'March 2024 breach)',
'number_of_records_exposed': ['73 million (March 2024)',
"'Nearly all' cellular "
'customers (July 2024, exact '
'number unspecified)'],
'personally_identifiable_information': ['Social Security '
'numbers',
'Birth dates',
'Call records',
'Text records'],
'sensitivity_of_data': 'High (PII including SSNs)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII): birth dates, '
'Social Security numbers (March '
'2024)',
'Call and text records (July '
'2024)']},
'date_detected': ['2024-03-01', '2024-07-01'],
'date_publicly_disclosed': ['2024-03-01', '2024-07-01'],
'description': 'Two separate data breaches at AT&T exposed sensitive customer '
'information. The first breach, announced in March 2024, '
'compromised data of 73 million current and former account '
'holders, including birth dates and Social Security numbers, '
'found on the dark web. The second breach, announced in July '
"2024, exposed call and text records of 'nearly all' cellular "
'customers. A $177 million legal settlement has been proposed, '
'with $149 million allocated for the first breach and $28 '
'million for the second. Eligible customers can file claims '
'for compensation up to $7,500, pending court approval on '
'December 3, 2025.',
'impact': {'brand_reputation_impact': 'Significant (class-action lawsuits, '
'public disclosure, settlement process)',
'customer_complaints': 'Multiple lawsuits filed in state and '
'federal courts',
'data_compromised': ['73 million records (March 2024: birth dates, '
'Social Security numbers)',
"Call and text records of 'nearly all' "
'cellular customers (July 2024)'],
'financial_loss': '$177 million (proposed settlement)',
'identity_theft_risk': 'High (Social Security numbers and birth '
'dates exposed)',
'legal_liabilities': '$177 million proposed settlement (pending '
'court approval)'},
'investigation_status': 'Ongoing (settlement pending court approval on '
'2025-12-03)',
'references': [{'source': 'AT&T Settlement Website (via Kroll Settlement '
'Administration)'},
{'source': 'Public announcement of settlement (August 4, '
'2024)'}],
'regulatory_compliance': {'legal_actions': ['Multiple lawsuits filed in state '
'and federal courts',
'Consolidated into two '
'class-action cases',
'$177 million proposed settlement '
'(pending court approval on '
'2025-12-03)']},
'response': {'communication_strategy': {'claim_process': 'Online claim form '
'available until '
'2025-11-18',
'customer_notifications': 'Emails '
'sent from '
"'[email protected]'",
'customer_support': 'Phone line (833) '
'890-4930 for '
'eligibility '
'questions'},
'third_party_assistance': {'settlement_administrator': 'Kroll '
'Settlement '
'Administration'}},
'stakeholder_advisories': {'claim_process': 'Online form submission required '
'by 2025-11-18',
'compensation_details': 'Up to $5,000 (March 2024 '
'breach), $2,500 (July '
'2024 breach), or $7,500 '
'(both breaches) with '
'documentation',
'customer_eligibility': 'Notices emailed to '
'eligible customers; phone '
'support available'},
'title': 'AT&T Data Breaches (March 2024 & July 2024)',
'type': ['Data Breach', 'Unauthorized Data Exposure']}