In the increasingly connected world, digital privacy is a fragile commodity, constantly under threat from unseen threats lurking in the dark web. Millions of individuals have found their personal details exposed, leading to significant legal repercussions for the companies that held their data. The fallout from these large-scale security failures has culminated in a massive financial settlement, covering the costs of two distinct data breaches.
Last year, AT&T reached a comprehensive settlement in a class-action lawsuit, amounting to a total of $177 million. The Texas district court formally approved this agreement on October 2nd, ensuring that customers affected by the theft of their private information would be covered. These settlements address two separate incidents: one involving critical personal identifiers and a second involving extensive communication logs.
The twin threats to personal data
The first major security incident impacted roughly 73 million current and former customers. This breach resulted in the exposure of highly sensitive personal data, crucially including social security numbers. The company agreed to dedicate $149 million specifically to address the damages stemming from this initial intrusion.
The second significant data breach was uncovered by the company in July, targeting customers who used the network between May 1 and October 31, 2022. This intrusion gained access to AT&T’s cloud server, resulting in the theft of call and text records. For this second incident, a separate allocation of $28 million was made within the overall settlement fund.
Navigating the complex compensation tiers
The structure of the settlement is highly intricate, with claimants divided into three distinct tiers based on the nature of the data compromised. The largest group, Tier 3, comprising over 1.5 million people affected by the July breach, will receive approximately $6.50 to $7.10 per person.
Tier 1 members, numbering over 1.65 million individuals, are those whose social security numbers were exposed; these claimants are entitled to receive around $39 to $40 each. Tier 2 claimants, who were affected but did not have their SSNs exposed, number over 687,000 people and will receive approximately $7.50 to $8.10. The reality of these payouts has been noted by an observer: “Several million dollars divided by several million people actually won’t leave you with much.”
Documented losses and what happens next
While the standard payouts are determined by the tier, claimants have the option to seek greater compensation if they can provide evidence of actual losses. Tier 1 claimants, those with their SSNs exposed, can claim up to $5,000 for documented damages. Tier 2 claimants can claim up to $2,500, provided they supply the necessary documented losses.
Interestingly, individuals who are part of both the Tier 1 and Tier 3 groups could theoretically receive a total payout of up to $7,500. The process has been governed by strict deadlines, with the window to opt in for a payout closing on December 18th last year. Although payments are not expected to begin until around December of this year, provided no appeals are lodged, the fight for digital security continues. The threat of exposed personal details remains a persistent shadow in the digital age.
Source: Mashable
