Data and AI in court

433 active cases · 9 dates ahead

In re AT&T Customer Data Security Breach Litigation data breach case

Brought by

Consumer class plaintiffs

v.

Defendants

Consolidated class actions over two 2024 incidents: customer data posted on the dark web and call and text records stolen from AT&T's Snowflake workspace.

The case

Court
US District Court, Northern District of Texas
Docket
3:24-md-03114
Filed
Jun 5, 2024
Status
Settled
Outcome
AT&T agreed to a USD 177 million settlement covering two 2024 data incidents.
Amount
$177 million

History

5 dated entries
OrderMar 19 · 8mo agoORDER APPROVING SPECIAL CLAIMS ADMINISTRATION MASTER'S AND EXPERT CONSULTANT'S FEBRUARY 2026 FEES AND EXPENSES. (Ordered by Judge Ada Brown on 3/19/2026)Source
OrderFeb 20 · 9mo agoORDER TERMINATING CASE MANAGEMENT ORDER #17 - On September 23, 2025, the Court issued Case Management Order #17, appointing Richard J. Arsenault as Special Master to assist the CouSource
OrderFeb 20 · 9mo agoORDER APPROVING SPECIAL CLAIMS ADMINISTRATION MASTER'S AND EXPERT CONSULTANT'S JANUARY 2026 FEES AND EXPENSES. (Ordered by Judge Ada Brown on 2/20/2026) (Main Document 71 replacedSource
OrderJan 21 · 10mo agoOrder approving special claims administration master richard j. arsenault's summary statement of fees and expenses for october 2025 to december 2025 and order approving expert consSource
FilingJun 5, 2024 · 2.4y agoComplaint filed: In Re: AT&T Inc Customer Data Security Breach LitigationSource
Data breachDecidedfiled Dec 2025ICO fine: LastPass, 2022 breachThe ICO found weak security let a hacker who compromised employee laptops in August 2022 reach a backup database holding data of up to 1.6 million UK users.GBP 1.2 millionUK Information Commissioner's OfficeData breachActivefiled Aug 2025In re Coinbase Customer Data Security Breach LitigationConsolidated suits over the 2025 incident in which bribed overseas support agents leaked Coinbase customer data used in social engineering scams.S.D. N.Y.Data breachDecidedfiled Jun 2025ICO fine: 23andMe, genetic data breachJoint ICO and Canadian privacy commissioner investigation into the 2023 credential stuffing attack that exposed data of 155,592 UK residents; the ICO found security measures were inadequate.GBP 2.31 millionUK Information Commissioner's OfficeData breachActivefiled Apr 2025In re PowerSchool Customer Data Security Breach LitigationConsolidated suits over the December 2024 breach of PowerSchool's student information system that exposed data of students and teachers across many school districts.S.D. Cal.Data breachSettledfiled Jan 2025FTC: GoDaddy, hosting securityThe FTC alleged that since 2018 GoDaddy failed to use reasonable security for its web hosting services, leading to breaches, while claiming strong protection.US Federal Trade CommissionData breachDecidedfiled Dec 2024DPC fine: Meta, 2018 Facebook breachTwo inquiries into a September 2018 Facebook data breach that affected about 29 million accounts worldwide, around 3 million in the EU/EEA, covering breach notification and data protection by design.EUR 251 millionIrish DPCData breachSettledfiled Oct 2024FTC: Marriott and Starwood, data breachesThe FTC alleged lax security led to three breaches from 2014 to 2020 affecting more than 344 million customers worldwide.US Federal Trade CommissionData breachActivefiled Oct 2024In re Snowflake Data Security Breach LitigationConsolidated suits over the 2024 theft of customer data from Snowflake cloud accounts lacking multifactor authentication, affecting customers including AT&T, Ticketmaster and Advance Auto Parts.D. Mont.
Caption and links

In Re: AT&T Inc Customer Data Security Breach Litigation

Full docket on CourtListener

Also onawards·Stories