AT&T data breach: what happened and what to do
Last reviewed July 11, 2026 · 13 records on file · sources listed below
The Topeka City Council unanimously approved initiating litigation against AT&T for breach of contract related to construction delays, but the article does not provide any evidence of a confirmed data breach or cybersecurity incident involving unauthorized exposure of sensitive data.
If you have an account with AT&T, assume the exposed details are circulating. The practical risk today is rarely the leak itself — it is the calls and messages that use those details to sound legitimate.
What we have on file
Every entry below is a catalogued record with its original source. We do not paraphrase beyond what the source reports.
Personal Information · Unknown
AT&T is seeking court approval for a $177 million settlement related to a data breach that compromised customer data. The company has asked a federal judge in Texas to block last-minute discovery demands from objecting customers, arguing these requests are designed to delay final approval of the settlement.
Personal Information · Unknown
AT&T reached a $177 million settlement over two data breaches that compromised customer data, with affected consumers eligible to claim payments from the settlement fund.
Personal Information · Unknown
AT&T has proposed a $177 million settlement for two significant data breaches that affected millions of customers, with payouts up to $7,500 for affected individuals.
Personal Information · Unknown
AT&T experienced a data leak where previously exposed customer information was repackaged with additional sensitive personal details, including Social Security numbers and birth dates.
Personal Information · Unknown
AT&T disclosed two massive data breaches affecting tens of millions of customers, leading to a $177 million settlement. The deadline for impacted customers to file claims is December 18, 2025, with potential compensation up to $7,500 per claimant.
Personal Information · Unauthorized Access
AT&T was fined $13 million for a data breach where customer bill information was given to a vendor for personalized videos and not properly destroyed, leading to unauthorized access.
Personal Information · Unknown
AT&T has reached a proposed settlement in class-action lawsuits over two major data breaches that occurred last year, affecting current and former customers. The settlement allows eligible customers to receive up to $7,500.
Personal Information · Hacking
AT&T experienced data breaches in 2019 and 2024, with the 2024 breach involving a Snowflake hack that compromised customer data, leading to a $177 million settlement where affected individuals can claim up to $7,500 in compensation.
Personal Information · Unknown
AT&T announced that data linked to 73 million current and former customers was illicitly accessed and listed on the dark web. The breach exposed personal information, and affected customers may be eligible for compensation.
Personal Information · Unknown
AT&T's Snowflake data breach in 2024 affected more than 100 million people, leading to a $177 million settlement. Customers can now file claims for compensation.
Personal Information · Unknown
AT&T has reached a settlement with the FCC over a 2023 data breach involving customer data. The breach occurred due to a third-party vendor's failure to properly delete customer data, resulting in unauthorized exposure. AT&T agreed to pay a $13 million fine.
Personal Information · Unknown
AT&T has agreed to a $177 million settlement for data breaches that occurred in 2019 and 2024, exposing personal information of customers. Affected individuals can file claims for compensation.
What to do
- Change the password anywhere you reused itThe exposure matters most when the same password protects your email, because email is how everything else gets reset.
- Treat every call and text about this breach as a scam until proven otherwiseNo company will ask you for a one-time code, a PIN or a password. Hang up and call the number printed on your card.
- Read your statements for the next three monthsCard fraud usually starts with a small test charge. Catching that one is what stops the large one.
- Give your email account a password nothing else usesIt is the account that can reset all the others, so it is the one worth protecting first.
Questions people ask
Was my data in the AT&T breach?
Having an account alone does not confirm exposure. The reliable check is whether your email address appears in the leaked datasets in circulation — that takes seconds and does not require your password.
Is it too late to do anything?
No. Leaked personal details do not expire, and neither does the defence: a unique password on your email, and a fraud alert on your credit file, still work years later.
Will AT&T contact me?
They may. But scammers contact people too, using exactly these breach details to sound convincing. Never act on an inbound call or text — call back on a number you already had.
701 organisations catalogued
Records are catalogued from public reporting and linked to their original source. iTellYou is not affiliated with the organisations listed. If you represent one of them and something here is inaccurate, write to us and we will correct it.