Introduction
Following two high-profile data incidents in 2024 (one disclosed in March and another in July), AT&T faced consolidated class action lawsuits alleging that it failed to protect consumers’ sensitive data—such as names, addresses, Social Security numbers, account credentials, call logs, and other private data—with reasonable cybersecurity safeguards. The parties reached a $177 million settlement (pending court approval), earmarked to compensate affected customers and reimburse documented losses or tiered payments.
Court & Jurisdiction
The multiple lawsuits were consolidated in the Northern District of Texas, before Judge Ada E. Brown. The consolidated case is styled In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E.
Plaintiff / Class Counsel
Public sources do not always name all plaintiff firms in the press. The consolidated complaint filed May 30, 2025 lists plaintiffs’ counsel representing the consolidated classes (for both AT&T “1” and “2” incidents).
Complaint / Docket
The consolidated complaint is referenced and summarized on the settlement / litigation site (TelecomDataSettlement.com) under In re AT&T Inc. Customer Data Security Breach Litigation.



