AT&T wins court approval to pay $177 million settlement over data breaches

A judge approves AT&T's settlement of $177 million that will be paid to victims of a couple of data breaches.

0comments
An AT&T sign shows the iconic ball logo and the AT&T wordmark.
Last year AT&T suffered through data breaches that exposed personal data belonging to tens of millions of the carrier's customers. That led to a class action lawsuit being filed against the wireless provider by AT&T subscribers. The nation's third-largest carrier eventually agreed to settle the class-action lawsuit for the tidy sum of $177 million and on Friday the settlement was approved by U.S. District Judge Ada Brown in Dallas. Brown called the settlement fair and reasonable.

There were two data breaches announced by AT&T last year with one revealed in May and the other in July. Depending on the breach involved, an AT&T customer who can show that they suffered losses "fairly traceable" to the breaches will receive a payment up to $2,500 or a payment up to $5,000. After paying off those who were victimized by direct losses, smaller payments will go out to those whose personal information was accessed in the data breaches.

One of the incidents resulted in call logs being copied from a company workspace on a Snowflake cloud platform. The data copied covered six months of customer call and text data from 2022 covering almost all of the carrier's customers. In March 2024, AT&T said that it was investigating data covering 7.6 million current account holders and 65.4 million former account holders whose personal data was released on the dark web. AT&T said it believed the data set dated back to 2019 or earlier.

Despite agreeing to the settlements, AT&T made it clear that it believes it was not at fault denying that it was "responsible for these criminal acts." The carrier claims, "We have agreed to this settlement to avoid the expense and uncertainty of protracted litigation." AT&T expects final approval of the settlement to come late in 2025 with settlement payments expected to start arriving early in 2026.

The FCC is also doing detective work trying to find out why, in 2023, an AT&T cloud vendor whose contract expired a few years before, was the subject of a data breach allowing 8.9 million customers to have their data exposed. This data was supposed to have been deleted prior to the data breach. Luckily, the vendor was not responsible for storing very sensitive data and most of the information exposed was AT&T customers' bill balances. This data covered customers who were with AT&T from 2015 through 2017 and the data should have been deleted in 2017 or 2018.

To settle this incident, AT&T paid a $13 million fine imposed on it by the FCC.

Grab a free iPhone 13 from Total Wireless!

Switch to Total 5G+ Unlimited 3-Month plan or Total 5G Unlimited and get a free iPhone.


We may earn a commission if you make a purchase

Check Out The Offer
Did you enjoy this article?
Еxplore more with a FREE members account.
  • Access members-only articles
  • Join community discussions
  • Share your own device reviews
  • Manage your newsletter choices
Register For Free
Loading Comments...

Latest Discussions

by Rad Slavov • 1
by Rad Slavov • 3
by silverfang77 • 2

Recommended Stories

FCC OKs Cingular\'s purchase of AT&T Wireless