If you're a current or former AT&T customer, you may be eligible for part of a $177 million class action settlement the telecom giant agreed to after a series of data breaches. But time is seriously running out: Eligible class members must submit a claim by Nov. 18, 2025.
In a class action lawsuit, plaintiffs alleged that, in 2019, hackers stole addresses, birthdates, Social Security numbers and other data belonging to 7.6 million current AT&T customers and 65.4 million former account holders and began selling the information on the dark web.
Offers in this section are from affiliate partners and selected based on a combination of engagement, product relevance, compensation, and consistent availability.
Plans from $10 to $32 per month, billed annually
Protects against identity theft, fraud, spam calls and websites, viruses and malware. Offers three-credit-bureau monitoring, VPN, dark web monitoring, password manager, email aliases and instant credit lock.
On Aura's site
From $7.50 to $25.00 per month, billed annually on individual plans and $12.50 to $33.33 per month, billed annually on family plans
Up to $1 million in insurance for eligible losses from identity theft
On Identity Guard's site
A second attack, announced in June 2024, involved hackers accessing phone numbers, call durations, cell site identification numbers and other data from "nearly all of AT&T's wireless customers" in a six-month period in 2022.
AT&T denied any wrongdoing in either case, but told CNBC Select in a statement that it opted to settle "to avoid the expense and uncertainty of protracted litigation."
"We remain committed to protecting our customers' data and ensuring their continued trust in us," the company said.
Who is eligible for payment in the AT&T settlement?
There are two settlement classes: The first includes subscribers affected by the 2019 cyberattack. The second applies to customers affected by the breach announced in July 2024.
You may qualify for both settlement classes If you were impacted by both incidents, but you'll need to submit two claims.
How much money can I get from the AT&T settlement?
If you can provide documentation that you suffered financial losses that are "fairly traceable" to the 2019 breach, you could be eligible for a payment of up to $5,000.
If you can't document your losses, you'll be eligible for a prorated share of the settlement after attorney and administrator fees are paid. Class members whose Social Security numbers were included in this breach are eligible for five times the payment amount of members whose SSNs were not exposed.
If you can provide documentation of losses relating to the second breach, announced in July 2024, there is a maximum payout of $2,500. Otherwise, you will be similarly eligible for a prorated share.
If you can document losses from both breaches, you could receive as much as $7,500.
How do I file a claim in the AT&T data breach settlement?
Eligible class members must submit a claim online or by mail by Tuesday, Nov. 18, 2025.
Claims can be submitted at the Telecom Data Settlement website or printed out and mailed to:
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
If you received a notification about the settlement, you'll need to include the Class Member ID that was included. If you believe you are eligible but didn't receive notification, you can direct inquiries to 833-890-4930 or the settlement website. You may also write to the address listed above.
You can also request to have a Class Member ID resent. You'll need to provide your full name and the email address or phone number associated with your AT&T account.
If you don't want to be part of the settlement or want to reserve your right to sue AT&T independently, you'll need to submit a written notice by Oct. 17.
When will I receive payment?
The final approval hearing for the case is scheduled for Dec. 3, 2025. After attorneys are paid, the remaining funds will be distributed to impacted customers. AT&T says it expects the settlement to be approved before the end of the year.
The longer you wait to act, the more time hackers have to use your identity. So, take action as soon as you suspect your personal information has been compromised.
File reports with the police and the Federal Trade Commission, so that you'll have supporting documentation if you need to challenge any charges or file an insurance claim. Document all your activities and conversations relating to the case.
Place a fraud alert with all three credit bureaus — it will let creditors know to verify any new credit requests made in your name. A basic fraud alert remains active for 90 days, but an extended alert rcan stay on your credit report for seven years.
In addition, contact any bank, credit card, or other business where you think fraudulent activity occurred in your name.
How to protect your data
AT&T is not alone in falling prey to cyberattacks. According to the Identity Theft Resource Center, more than 1,700 data breaches were reported in the first half of 2025, impacting over 165 million people.
In August, TransUnion announced that hackers had gained access to the names, birthdates and Social Security numbers of more than 4 million people.
There's no foolproof way to protect your data, but there are steps you can take to better protect your information and to respond in the wake of a cyberattack.
1. Pay close attention to cybersecurity incidents. Ignoring news about data breaches is the worst thing you can do. If you are a customer of a targeted business, search online for details about the incident and contact the company directly for more information.
Read any alerts you receive carefully and monitor your credit card statements for unusual transactions.
2. Check your credit reports. Some data breaches take a long time to become public knowledge. The first AT&T breach took place in 2019, for example, but wasn't confirmed by the company until 2024. That's why it's smart to proactively review your credit reports for signs of suspicious activity.
- You can obtain free copies of your reports from each of the three major bureaus (Equifax, Experian, and TransUnion) once a year by signing up at AnnualCreditReport.com.
- CreditWise from Capital One provides free access to your TransUnion credit report and you can get a free credit report from Experian every 30 days. Equifax offers two free credit reports per year with myEquifax.
- For regular updates on all three reports, consider subscribing to a paid identity theft protection service like PrivacyGuard® or Experian IdentityWorks.℠
PrivacyGuard®
Cost
$9.99 to $24.99 per month
Credit bureaus monitored
Experian, Equifax and TransUnion
Credit scoring model used
VantageScore
Dark web scan
Yes, for Identity and Total Protection plans
Identity insurance
Yes, up to $1 million for Identity and Total Protection plans
Terms apply.
Experian IdentityWorks℠
Cost
Basic: Free; Premium: 7-day trial, after $24.99 per month; Family: 7-day trial, after $34.99 per month
Credit bureaus monitored
1-bureau credit monitoring, alerts and reports: Experian, with Basic plan only and 3-bureau credit monitoring, alerts and reports: Experian, Equifax and TransUnion®, with Premium and Family plans only
Credit scoring model used
FICO® Score 8, with all plans
Dark web scan
Yes, with all plans
Identity theft insurance
Yes, up to $1 million with all plans
Terms apply.
*Identity Theft Insurance underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein is a summary and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.
3. Get a password manager
Password managers store your usernames, passwords and email addresses and protect them from unauthorized access. Beyond generating strong passwords and syncing them across devices, services like Keeper and Dashlane include additional benefits, like dark web monitoring, email masking and secure password sharing.
Keeper
Cost
Keeper Free: $0; Keeper Unlimited: $3.58 per user per month; Keeper Family: $7.67 per month; Business plan: $2.00 to $6.00 per month
Standout features
Allows importing from other password managers, adjusts auto-fill preferences for individual websites and allows for one-time password sharing
Offers free version
Yes
Availability
Available for web, desktop, and mobile devices.
Security features
Uses a zero-knowledge approach, government-standard AES-256 encryption, supports multi-factor authentication and biometrics, and performs quarterly third-party security penetration testing
Terms apply
Pros
- Helps you securely share passwords and files
- Offers unlimited password storage
- Supports fingerprint and Face ID login
- Password strength report
Cons
- Free version is limited to one mobile device
- Less Intuitive Interface
- Dark web monitoring and file storage only available on paid plans
Dashlane
Cost
Premium: $5.42 per month, includes VPN; Friends & family: $8.13 per month; Business plan: $8.00 per month; All prices are per month with annual billing selected
Standout features
The premium plan provides access to VPN, password health checker, dark web monitoring and allows you to securely store sensitive documents.
Offers free version
Yes
Availability
Available for web and mobile devices.
Security features
Uses a zero-knowledge approach, government-standard AES-256 encryption, multi-factor authentication, support for biometrics and has passed third-party security audits.
Terms apply
Pros
- Includes VPN in subscription
- MFA support
- Dark web monitoring
- Offers file storage
- Real-time scam protection
Cons
- Free version is limited to one device and 25 stored logins
- More expensive than some other competitors
- Lacks desktop app
4. Freeze your credit. Even if you're not part of a recent data breach, freezing your credit can prevent anyone from opening a new account in your name. There is no effect on your credit score or existing accounts. You'll need to request a freeze from all three credit bureaus and remember to unlock them when you want to apply for a credit card or loan or sign a lease.
- Equifax: Visit the Equifax Consumer Services Center or call 800-349-9960.
- Experian: Contact Experian's security freeze center or call 888-397-3742.
- TransUnion: Visit the TransUnion website or call 888-909-8872.
You'll need to provide personal information and answer questions to verify your identity. You'll also have to create a PIN, which should be kept in a secure location.
Identity monitoring service Aura can also freeze your credit without requiring you to contact the credit bureaus. It also offers a range of other security features, including a password generator, email aliases, a VPN, robocall filters and malware protection.
AT&T settlement FAQs
Who is eligible to make a claim in the AT&T settlement?
Past and current AT&T customers who are eligible to make a claim should have received an email from attsettlement@e.emailksa.com with details on the settlement and a Class Member ID. If you believe you are eligible but didn't receive notification, you can call 833-890-4930 or file an inquiry on the settlement website. You may also write to:
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324
How much money can I expect to receive from the settlement?
If you can prove you suffered losses as a result of both data breaches, you could be eligible for as much as $7,500. If you have documentation of losses from the 2019 breach alone, the maximum payout is $5,000. For the second breach, the maximum is $2,500.
If you are a class member but can't provide proof of financial loss, you are eligible for a prorated share of the settlement fund after attorney and administrator fees are paid.
When is the deadline to file a claim?
Eligible AT&T customers have until Nov. 18 to submit a claim. If you don't want to be part of the settlement or want to reserve your right to sue AT&T independently, you'll need to submit a written notice by Oct. 17.
A final approval hearing is scheduled for Dec. 3, 2025.
Catch up on CNBC Select's in-depth coverage of credit cards, banking and money, and follow us on TikTok, Facebook, Instagram and Twitter to stay up to date.
Money matters — so make the most of it. Get expert tips, strategies, news and everything else you need to maximize your money, right to your inbox. Sign up here.
Why trust CNBC Select?
At CNBC Select, our mission is to deliver high-quality service journalism and comprehensive consumer advice to our readers, enabling them to make informed financial decisions. Every cybersecurity article is based on rigorous reporting by our team of expert writers and editors. While CNBC Select earns a commission from affiliate partners on many offers and links, we create all our content independently of our commercial team and any outside third parties, and we pride ourselves on maintaining high journalistic standards and ethics.
