

In a significant resolution to two major data breaches, telecommunications giant AT&T has agreed to a $177 million settlement, impacting approximately 73 million customers whose personal information was exposed. The breaches, which occurred between 2019 and 2023, involved sensitive data such as social security numbers and customers' call and text records. AT&T's decision was propelled by the unification of multiple class-action lawsuits, ultimately leading to the settlement, which was approved by a Texas district court on October 2, 2023. The settlement breaks down into specific allocations, with $149 million designated for the first breach and $28 million for the second. Despite the large sum, individual payouts remain modest, varying based on the severity of the breach's impact on the claimant. Over $18 million is earmarked for lawyers' fees, leaving the remainder to be distributed among millions of claimants. Classification of claimants into three tiers determines the respective compensation. Tier 1, the most severely impacted with social security numbers exposed, includes around 1.65 million people, each receiving approximately $39-$40. Tier 2, while impacted, did not have social security numbers exposed and includes over 687,000 individuals, who will receive about $7.50-$8.10. Lastly, Tier 3, related to the subsequent breach involving call and text records, comprises over 1.5 million claimants, each entitled to $6.50-$7.10. Claimants in Tier 1 and Tier 2 had the opportunity to file for additional compensation up to $5,000 and $2,500, respectively, if they provided evidence of concrete financial losses due to the breaches. Despite this provision, most were unable to document sufficient losses to enhance their claims substantially. Importantly, the possibility of filing new claims has passed, as the deadline was December 18 of the previous year. Failure to file or opt out precludes further individual legal actions against AT&T on these matters. While the settlement has been finalized, the timeline for disbursement of funds remains uncertain. The potential for appeals could delay the payments, although, without appeals, distributions could begin as early as December of this year. The resolution stipulates that claimants must adhere to the settlement's conditions, prohibiting further litigation against AT&T related to these data breaches.