AT&T said on March 30, 2024, that a dataset released on the dark web appeared to contain information associated with about 73 million current and former account holders. That was the company’s preliminary estimate—not confirmation that every person had the same information exposed. If you received a notice, check what it says about your specific information and verify the message using contact details obtained independently from AT&T.
Were you affected?
The estimate does not establish that every current or former AT&T customer was affected. AT&T’s notice and any direct communication from the company are the relevant ways to learn whether it identified you as impacted and what information it associated with you.
- Read the notice carefully, including the listed information and any enrollment instructions.
- If a message arrives unexpectedly, do not click its links just because it mentions the breach. Find AT&T’s contact information through its official website or another source you trust, then confirm the notice directly.
- If the notice is authentic, follow the instructions it provides and keep a copy for your records.
- Watch relevant accounts for suspicious activity, particularly if the notice says account credentials or identifying information were involved.
The Associated Press advised readers to use a company’s official website for reliable contact information when checking a breach notice: Associated Press coverage.
What happened in the March 2024 incident?
On March 30, 2024, AT&T said a dataset had been released on the dark web about two weeks earlier. Its preliminary analysis suggested the data appeared to date from 2019 or earlier. AT&T estimated that it was associated with approximately 7.6 million current account holders and 65.4 million former account holders. Those figures were the company’s estimates, not a count of people for whom every listed data field was confirmed exposed. AT&T’s March 30 statement
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute#1 Best Overall
At the time of that announcement, AT&T said it had not determined whether the AT&T-specific fields originated with AT&T or a vendor, and that it was still assessing the source of other personal information in the dataset. The company also said: “Currently, AT&T does not have evidence of unauthorized access to its systems resulting in exfiltration of the data set.” That is AT&T’s statement on March 30, 2024, not an independent finding about the dataset’s origin.
What information was involved?
A breach notice AT&T filed in Massachusetts says the information varied by individual and account. It may have included:
- Full name, email address, mailing address, and phone number
- Social Security number and date of birth
- AT&T account number and passcode
The notice says that, to the company’s knowledge, personal financial information and call history were not included in this incident. It does not say that every person had every listed field exposed. AT&T’s Massachusetts breach notice
What is AT&T doing to help?
AT&T said it was contacting people it identified as affected and would offer credit monitoring at its expense where applicable. Its notice says identified impacted recipients were offered two years of complimentary credit monitoring, identity-theft detection, and resolution services through Experian IdentityWorks, subject to the notice’s enrollment instructions. Being a former AT&T customer by itself does not establish eligibility; check the notice and contact AT&T independently if you are unsure.
How is the March incident different from the July 2024 incident?
The two incidents should not be conflated. The court-authorized settlement website identifies them as separate incidents and separate classes. The March event concerns the dark-web dataset described above. The July event, announced by AT&T on July 12, 2024, concerned certain limited data downloaded from an AT&T workspace on a third-party cloud platform hosted by Snowflake.
| Incident | Announcement and data period | Information described | Source or status described |
|---|---|---|---|
| AT&T 1 — dark-web dataset | Announced March 30, 2024; AT&T said the data appeared to be from 2019 or earlier. | Potentially varied identity and account details, including Social Security numbers and AT&T passcodes; the Massachusetts notice says personal financial information and call history were not included to the company’s knowledge. | AT&T said it had not determined whether AT&T-specific fields came from AT&T or a vendor and was assessing other data’s source. AT&T statement; Massachusetts notice |
| AT&T 2 — vendor-cloud incident | Announced July 12, 2024; the settlement site describes a separate incident. | May include customer and interacted-with phone numbers, interaction counts, aggregate call durations, and, for a small subset, cell-site identification numbers. | The settlement site describes data downloaded from an AT&T workspace on a third-party cloud platform hosted by Snowflake. Court-authorized settlement website |
Separately, on September 17, 2024, the Federal Communications Commission announced a $13 million settlement with AT&T following an Enforcement Bureau investigation connected to a vendor’s cloud environment and customer information. That regulatory matter concerns vendor data handling; it is not proof that the March dark-web dataset came from the same cloud environment. FCC announcement
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is the current settlement status?
As of October 4, 2026, the court-authorized settlement website reports in an October 2 update that the court granted final approval of the consolidated settlement. The site treats the March and July incidents as separate classes. Its listed claim deadline of December 18, 2025, and opt-out and objection deadlines of November 17, 2025, have passed. The site is the place to check for current case information; the passed deadlines should not be treated as open, and no payment amount should be assumed. Settlement website
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches
