Case Statistics

Defendant Name: AT&T, Inc.

Court: United States District Court for the Northern District of Illinois Eastern Division

Practice Area: Privacy & Data Breaches

Status: Active
Date Filed: 04/12/2024

Case Documents

Case Overview

A group of AT&T customers have filed a class action lawsuit against AT&T, claiming the leading telecommunications provider failed to properly protect their data, allowing a widespread data breach that impacted their personal information along with more than 73 million current and former AT&T customers.

The lawsuit alleges that in mid-March 2024, AT&T became aware of the data breach, but subsequent reports indicate that the impacted personal information may have been stolen in a 2021 breach.

According to the complaint, on March 30, 2024, AT&T posted a notice to its website announcing that the sensitive information of current and former customers had been “released on the dark web.” AT&T communications on the subject stated that full names, email addresses, phone numbers, social security numbers, dates of birth, AT&T account numbers, and passcodes had been among the data accessed during the breach.

“AT&T says that it takes cybersecurity very seriously, but this incident has revealed extreme gaps in the company’s data security procedures and practices,” said Elizabeth Fegan, managing partner of FeganScott, a law firm dedicated to protecting the rights of consumers. “Through our lawsuit, we intend to ensure that AT&T takes significant action to protect the data of its customers.”

The complaint details the systemic and organizational failures that led to the data breach, and the irreparable harm these failures caused or could have caused customers’ personal and financial well-being.

“Organizations like AT&T need to understand that issues like this have serious, lasting consequences to consumers; it isn’t an abstract issue,” added Fegan. “Companies owe it to their customers to have the appropriate systems to sufficiently respond to cybersecurity threats and, ideally, prevent them from happening.”

Current and former AT&T customers who have received an email notification that their personal data may have been compromised are urged to contact to learn more about their rights or visit for more information.