AT&T faced two major data breaches: the 2019 incident affected about 65.4 million former customers and 7.6 million active accounts, exposing Social Security numbers and other sensitive data, prompting an emergency password reset; the 2024 breach hit nearly 109 million wireless customers, exposing call/text records, timestamps, and location data.

The 2024 breach was tied to hacking activity by the UNC5537 group, linked to a broader Snowflake-related breach campaign that targeted Snowflake databases via third-party partners.

Details from the 2019 breach include Social Security numbers and other sensitive data, affecting millions and triggering the password reset for affected users.

Settlement claims are moving forward with potential payments following court approval, and could be issued within 60 days of final approval, potentially stretching into early 2027 if appeals occur.

Although the claim deadline has passed, processing continues; final court approval could come if no appeals are filed by early November.

About 4.9 million eligible claimants have filed, with more than 3.7 million expected to receive the lower tier payouts due to lack of documented losses.

Claimants can check status and updates at telecomdatasettlement.com or by calling 833-890-4930.

Ongoing monitoring and patching of affected systems are in place, with emphasis on defending Snowflake-based data exposed via third-party partners.

AT&T reached a $177 million settlement in the class-action over the 2019 and 2024 breaches, without admitting wrongdoing.

Two individuals tied to the case were arrested; UNC5537 claimed responsibility for the 2024 breach, linking it to broader Snowflake-targeting activity.

Public disclosure of breaches was not immediate, and concerns remain about hackers targeting Snowflake servers through third-party partners.

The total number of affected customers is capped at about 110 million due to overlap between the 2019 and 2024 breaches, and AT&T did not publicly acknowledge the breaches right away.