AT&T Customer Data Breach Class Action
Case Overview
In March 2024, AT&T confirmed that a dataset containing sensitive personal information for approximately 73 million current and former customers had been leaked on the dark web. The exposed data included full names, home addresses, phone numbers, dates of birth, Social Security numbers, and AT&T account passcodes. AT&T acknowledged that the data appeared to be from a 2019 breach but had only surfaced publicly in early 2024. Plaintiffs allege that AT&T failed to implement adequate cybersecurity safeguards and unreasonably delayed notifying affected customers, violating multiple state and federal data protection obligations.
A second, distinct AT&T data breach was disclosed in July 2024, revealing that hackers had accessed the call and text message records of nearly all AT&T wireless customers — approximately 109 million people — covering a six-month period in 2022. The records included phone numbers contacted, call durations, and cell site location data. Multiple class action lawsuits have been filed in federal court and consolidated, and the matter has drawn investigations from the FCC and state attorneys general. No global settlement has been announced, and the litigation is in active discovery as of 2025.
Who May Qualify
Current or former AT&T wireless or internet customers whose personal information was exposed in the March 2024 data breach (Social Security numbers, passcodes, account data) or whose call and text metadata was accessed in the July 2024 breach of records covering approximately May–October 2022.
Frequently Asked Questions
Was I affected by the AT&T data breach?
You may have been affected if you were a current or former AT&T wireless customer as of 2019 — approximately 73 million people had personal data including Social Security numbers and passcodes exposed. A separate July 2024 breach affected call and text records for roughly 109 million AT&T wireless customers from mid-2022.
Can I sue AT&T for the 2024 data breach?
Class action lawsuits have been filed against AT&T on behalf of affected customers. If you are a current or former AT&T customer whose data was exposed in either the March 2024 or July 2024 breaches, you may be eligible to join the class action. The case is still in active litigation and no settlement has been reached.
What information was stolen in the AT&T data breach?
The March 2024 breach exposed names, addresses, phone numbers, dates of birth, Social Security numbers, and account passcodes for about 73 million customers. The July 2024 breach exposed call and text message metadata — including phone numbers contacted and call durations — for nearly all AT&T wireless customers over a six-month period in 2022.