DE · AG Filing: Jul 28, 2026
Investigation Active — If you were affected, free legal review is available. No obligation.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in DE. This website is not affiliated with, endorsed by, or operated by any state government agency.
AT&T, Inc. was responsible for safeguarding the personal data of its customers and employees. According to a DE state filing, AT&T, Inc. experienced a data security incident affecting an undisclosed number of individuals, exposing financial account information and payment data. This breach was recently disclosed and the window for legal action is open now.
AT&T, Inc. appears to be a major telecommunications and technology company that provides wireless, broadband, and digital services to millions of consumers. In the course of business, the company typically collects and stores sensitive customer information, including names, billing addresses, contact details, account credentials, and payment card information. This data security incident was officially reported to the Delaware Attorney General in 2026. If you received a data breach notification letter in the mail, it means your personal information may have been compromised in this security event. This page provides an overview of the incident and outlines the types of data potentially involved to help you understand the notice you received.
You may have been affected by the AT&T, Inc. data breach if:
Applicable State Law
This breach was reported under the Delaware Online Privacy and Protection Act, which mandates notification to affected individuals and establishes your right to seek damages.
Received a notification letter from AT&T, Inc.?
Read our dedicated guide — what the letter means and exactly what to do.
No. Under Delaware Online Privacy and Protection Act and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from AT&T, Inc. does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
"According to a state filing in DE on July 28, 2026, this breach affected not publicly disclosed individuals."
View official DE AG filing →AT&T, Inc. breach?
Free case review · No fee unless you win