AT&T Customer Data Breach Class Action
Case Overview
In March 2024, AT&T confirmed that a dataset containing the personal information of approximately 73 million current and former customers had been leaked and circulated on the dark web. The compromised data included full names, home addresses, phone numbers, dates of birth, Social Security numbers, and AT&T account passcodes. AT&T initially denied the data originated from its systems, but ultimately acknowledged the breach after independent cybersecurity researchers verified the authenticity of the records. The company reset account passcodes for affected customers but faced immediate class action lawsuits alleging it failed to implement adequate data security measures.
Dozens of class action complaints were filed in federal courts across the country within weeks of the disclosure and were consolidated in the Northern District of Texas. Plaintiffs allege negligence, breach of implied contract, and violations of state consumer protection and data privacy laws, arguing that AT&T collected and retained highly sensitive personal data without implementing reasonable security safeguards. A separate AT&T breach disclosed in July 2024 — involving call and text metadata for nearly all AT&T wireless customers from 2022 — further expanded the litigation's scope. Both breaches are expected to be addressed as the consolidated case proceeds toward class certification in 2025.
Who May Qualify
Current or former AT&T wireless or broadband customers whose personal information (including Social Security numbers, account data, or call/text metadata) was exposed in either the March 2024 data breach or the July 2024 call records breach. Individuals who received AT&T notification letters are likely class members.
Frequently Asked Questions
Was I affected by the AT&T data breach?
If you were an AT&T customer at any point before 2024 or are a current customer, your data may have been exposed. AT&T notified affected customers via email and letter. You can also check whether your email or phone number appears in breach databases at sites like HaveIBeenPwned.com.
What information was stolen in the AT&T data breach?
The March 2024 breach exposed full names, addresses, phone numbers, dates of birth, Social Security numbers, and account passcodes for roughly 73 million people. A separate July 2024 breach exposed call and text message metadata (numbers contacted, call duration, etc.) for nearly all AT&T wireless customers from mid-2022.
How do I join the AT&T data breach lawsuit?
Class action lawsuits have been filed and are pending in the Northern District of Texas. You do not need to take any immediate action to be included in a class — most class members are automatically included once a class is certified. Consulting a data breach attorney can help you understand your options, including whether to opt out and pursue an individual claim.