AT&T Settles Nationwide Cyber Security Breach Case for $177 Million

Cyber Security

In re AT&T Data Breach Litigation (U.S. District Court, Northern District of Texas Case No. 3:24-md-0328)

On June 20, 2025, the U.S. District Court for the Northern District of Texas approved a $177 million nationwide settlement, resolving class-action claims arising from two major data breaches disclosed in 2024. The breaches exposed sensitive customer information—including Social Security numbers, call and text metadata, and account credentials—for tens of millions of AT&T users.

Plaintiffs alleged that AT&T failed to maintain reasonable cybersecurity safeguards, enabling unauthorized actors to gain access to highly sensitive consumer data and creating substantial, ongoing risks of identity theft and fraud. Under the settlement, affected individuals may receive up to $5,000 for documented losses related to the first breach and up to $2,500 for losses stemming from the second breach. Customers impacted by both incidents may recover up to $7,500 total, in addition to credit-monitoring and identity-protection services.

The plaintiff class was represented by DiCello Levitt LLP, Morgan & Morgan, and Keller Postman LLC, who served as court-appointed lead and co-lead counsel. AT&T was represented by Gibson, Dunn & Crutcher LLP alongside its internal corporate counsel.