Terms Unconditional

Retail & Fintech · Telecom (prepaid) · Data breach

Cricket Wireless (AT&T)

Headline

The 2024 Cricket exposure came through the same AT&T-related incidents documented in the Carriers tab, and the structural finding is the prepaid distinction…

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

The 2024 Cricket exposure came through the same AT&T-related incidents documented in the Carriers tab, and the structural finding is the prepaid distinction: Cricket serves a customer base that skews lower-income and includes many people who chose prepaid specifically to avoid a credit check and a long-term contract. Those customers are less likely to have credit monitoring, more likely to be harmed by identity theft, and least likely to be reached by a mailed breach notification because prepaid customers move addresses more often. The brand also obscures the parent, so affected customers searching for news about their carrier find nothing.

  • SeveritySeverity 3 of 5, not independently verified. The 2024 Cricket exposure came through the same AT&T-related incidents documented in the Carriers tab, and the structural finding is the prepaid distinction…
  • Evidence tierUnassigned
  • Claims confirmedNo sourced claims yet
  • Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Last verified 96 days agoverified 96 days ago0180 days
Freshness. Last verified 96 days ago (2026-08-04); stale after 180 days.

Terms

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected; same general framework as AT&T's postpaid arbitration clause (see AT&T row, Carriers tab).

Data sharing

MASSIVE CONFIRMED 2024 BREACH: Cricket Wireless (an AT&T-owned prepaid brand) was one of MANY organizations swept up in the massive SNOWFLAKE cloud-platform breach (the same underlying attack campaign that hit AT&T, Ticketmaster, Santander Bank, and 160+ other organizations, all using improperly-secured Snowflake accounts) — exposing CALL AND TEXT RECORDS (plus cell site ID numbers and phone numbers) for nearly ALL Cricket Wireless customers with activity between May-October 2022 and Jan 2023, affecting Cricket customers (AT&T's 8-K says the records covered nearly all AT&T wireless customers and customers of MVNOs using its network; a Cricket-specific count was not verified). AT&T learned of the breach on April 19, 2024 but did not disclose it until July 12, 2024 — a delay the U.S. Department of Justice determined was warranted on May 9 and June 5, 2024. Cricket was included in AT&T's combined $177 MILLION settlement (covering both the March 2024 AT&T breach and this July 2024 Snowflake breach) — the AT&T 2 settlement fund specifically ($28M, covering the Snowflake-linked breach affecting BOTH AT&T and Cricket customers) offered up to $2,500 for documented losses, with customers hit by BOTH breaches eligible for up to $7,500 combined. The claim deadline (Dec 18, 2025) has passed; press reports cite nearly 5 million claim forms submitted; the settlement administrator's website states the court granted final approval on October 2, 2026; payment timing and any appeals were not confirmed.

Fees and billing

Not itemized this pass.

Contacts

Privacy contact. privacypolicy@att.com

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. PARENT ADDRESS ONLY — verify before using for legal notice. Cricket Wireless LLC is an AT&T sub-brand with its own entity. Parent: AT&T Chief Privacy Office, 208 S. Akard St., Room 2901, Dallas, TX 75202, USA (AT&T also operates a Data Request Center and a Global Legal Demand Center for law-enforcement demands)

Written channel present
Paper trail: written. Written channel present.

Evidence

No claims have been itemized for this row yet.

No sources are on file for this row yet.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
cricketwireless.com/legal/privacy-policy
Not fetched yetNO (HTML only)
Terms of service
cricketwireless.com/legal/terms-and-conditions
Not fetched yetNO (HTML only)
Website
No URL recorded
Not fetched yet—
Primary source
No URL recorded
Verification: Unverified - heuristic first draft
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

No HQ state on file, so no state statute applies by headquarters.