Final Hours to Claim Your Share of $117M AT&T Data Breach Settlement

Time is almost up to file a claim in a major data breach settlement affecting millions of AT&T customers. If you were impacted by either of the two large-scale security incidents tied to the company, you may be eligible for up to $5,000 in compensation — but the deadline to file is December 18, 2025.

As data breaches become more common in the digital age, these settlements are growing in both size and frequency. While they won’t always restore what’s lost, they are designed to hold companies accountable and help affected consumers recover some of the financial burden.

Breach

Cyberattacks are no longer rare events. With more sensitive customer data being stored online, companies face increasing responsibility to protect that information. When they fail, and data like Social Security numbers or phone records are leaked, users may be entitled to a payout through class action lawsuits.

In the case of AT&T, the company has agreed to a $117 million settlement following two separate data breaches — one from 2019 and another from 2024. Both affected millions of customers and former account holders.

Timeline

Here’s a breakdown of the two breaches involved in the AT&T settlement:

• 2019 Breach: Affected 7.6 million current customers and 65.4 million former customers. Sensitive personal data, including Social Security numbers, was exposed. The company did not acknowledge the breach until March 2024.
• 2024 Breach: Occurred in April 2024 and involved 2022 phone records. Nearly 109 million U.S. users had their information accessed by cybercriminals.

If you’re one of the affected individuals, you may now qualify for a cash payment — but only if you file your claim by the deadline.

Eligibility

Depending on which breach impacted you, your compensation may vary:

Data Breach Year	Compensation for Documented Losses	Eligible Group
2019	Up to $5,000	7.6M current & 65.4M former customers
2024	Up to $2,500	Nearly all 109M AT&T users

In both cases, the higher compensation applies to documented losses — things like out-of-pocket expenses, credit monitoring fees, identity theft costs, or time spent dealing with fraud.

If you do not submit documentation of losses, you may still be eligible for a pro rata cash payment, depending on how many people file claims and the remaining settlement funds.

Deadline

The deadline to submit a claim is December 18, 2025. If you wish to be compensated, you must file your claim by this date.

Keep in mind, the final date to object to the settlement’s terms was November 17, 2025. This means if you disagree with the payout or legal terms, you can no longer file a formal objection. From this point forward, it’s about getting your payment — if you qualify and apply on time.

Growth

This case is part of a growing trend. In recent months, a wave of similar lawsuits has been filed against companies for failing to protect user data. Even when no wrongdoing is admitted, many companies settle these lawsuits to resolve legal claims and compensate affected individuals.

Some settlements offer payouts in the thousands, like this one. But most are designed less for profit and more to cover real costs: time, money, and stress that people face after their information is stolen. In many cases, the goal is also to push companies to improve their cybersecurity going forward.

Action

If you think you were affected, here’s what to do now:

• Check your eligibility: Visit the official settlement website to see if your data was involved in the 2019 or 2024 breach.
• Document your losses: Gather receipts or evidence of identity theft-related expenses if you’re claiming more than the base amount.
• Submit your claim: File your claim online or by mail before December 18, 2025.

You don’t need to pay anything to claim — and if you’re eligible, you deserve to be included. Don’t miss the window.

FAQs