AT&T's US$177 million settlement over its two 2024 data breaches (73 million customer records, and Snowflake-hosted call and text logs for nearly all cellular customers) wins final court approval
A US federal judge granted final approval on 2 October 2026 to AT&T's US$177 million settlement of class actions over two customer data breaches it disclosed in 2024, according to Cyber Security News (10 October), which cites Bloomberg Law. Judge Sidney A. Fitzwater of the US District Court for the Northern District of Texas approved the deal; AT&T did not admit liability. It sets up a US$149 million fund for the first incident and a US$28 million fund for the second, with legal fees and administration paid from those funds. The first incident, announced on 30 March 2024, involved data on about 7.6 million current and 65.4 million former account holders that appeared on the dark web, including names, addresses, phone numbers, dates of birth, account passcodes and Social Security numbers, mostly dating from 2019 or earlier. The second, announced on 12 July 2024, involved call and text records for nearly all AT&T cellular customers stolen from AT&T's workspace on the Snowflake cloud data platform between 14 and 25 April 2024; it exposed phone numbers, interaction counts, call durations and some cell site identifiers but not message content or Social Security numbers. Claimants can recover up to US$5,000 (first incident) or US$2,500 (second) for documented losses; the claim deadline was 18 December 2025 and no payment date has been announced. The Snowflake theft was part of the 2024 campaign against many Snowflake customer accounts. Wire: Cyber Security News, citing Bloomberg Law.
- Product
- AT&T customer account data (2019-era dataset) and AT&T Snowflake workspace (2022–23 call and text records)
- Versions
- n/a
Primary: Cyber Security News — AT&T to pay $177 million after two massive customer data breaches (10 Oct 2026, citing Bloomberg Law) · Vendor: AT&T data incident settlement administrator site