AT&T to Pay $177 Million to Settle Lawsuits Over Two 2024 Data Breaches

AT&T will pay $177 million to settle lawsuits related to two massive customer data breaches, according to Cyber Security News. A federal judge granted final approval for the settlement agreement on October 2, 2026, concluding legal proceedings initiated after the incidents were disclosed in 2024. The financial penalty addresses significant privacy violations involving millions of individuals.

The settlement covers two separate security incidents that compromised sensitive customer information. According to the report, these breaches exposed personal details and call records, creating lasting privacy risks for the affected population. The agreement resolves the legal disputes between the telecommunications giant and the customers impacted by the data exposures during the 2024 disclosure period.

Context and Background

Judge Sidney A. Fitzwater provided the final judicial approval for the $177 million agreement on October 2, 2026. This date marks the formal conclusion of the settlement process following the initial disclosure of the breaches in 2024. The court's approval ensures that the funds will be distributed to resolve the lawsuits filed by customers whose data was compromised.

The two incidents are distinct events but are being resolved under a single settlement framework. Cyber Security News reported that the agreement covers separate incidents that exposed different types of data. This consolidated approach allows for a unified resolution of the legal claims arising from the 2024 security failures.

Who Is Affected

Millions of current and former AT&T customers are affected by the data breaches. The exposed data includes personal details and call records, which can be used for identity theft or harassment. The settlement aims to compensate those whose privacy was violated during the two separate incidents that occurred prior to the 2024 disclosure.

The lasting privacy risks mentioned in the report highlight the severity of the exposure. Call records can reveal location data, contact networks, and communication patterns. Personal details may include names, addresses, and other identifying information that increases the risk of fraud for the affected individuals.

What should you do?

Customers should review their financial statements and credit reports for unauthorized activity. Monitoring for new accounts opened in one's name is essential after such a breach. Individuals should also consider placing fraud alerts or credit freezes to limit exposure.

What to do and how to stay safe: AT&T

• Monitor bank and credit card statements regularly for unauthorized transactions or unfamiliar charges that could indicate identity theft.
• Check credit reports from major bureaus for new accounts or inquiries you did not initiate, and dispute any errors immediately.
• Place a fraud alert or credit freeze on your credit files to prevent new accounts from being opened without your explicit permission.
• Review call logs and personal data settings with your service provider to ensure no unauthorized access remains active on your account.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much is AT&T paying to settle the data breach lawsuits?

AT&T is paying $177 million to settle the lawsuits related to the two data breaches.

When did the judge approve the settlement?

Federal Judge Sidney A. Fitzwater granted final approval for the settlement on October 2, 2026.

What kind of data was exposed in the breaches?

The breaches exposed personal details and call records for millions of current and former customers.