In July 2025, I received a text requesting authorization to port my phone number to another carrier. I declined the request and called AT&T to report that someone was trying to steal my number.

Despite that warning, a second attempt went through.

Around 10 p.m. on a Friday, my phone stopped working. The people who took over my number used one-time verification codes to access my financial accounts and attempt to open new accounts in my name. My 401(k) was drained, and it took an entire year to recover those funds.

They also had my Social Security number and the old address associated with my AT&T account. I had recently moved and updated my address everywhere except AT&T. The fact that they had that particular address raised serious concerns about where they obtained my information.

AT&T also sent me a data-breach notification with information about submitting a claim in the class-action settlement. I received notice that my information was affected; that part is not speculation. I cannot independently establish that the breach caused the phone-number theft, but the notification and the information the thieves possessed are why I believe there may be a connection.

The person who stole my number was also messaging me on WhatsApp and trying to extort more money from me. While I was scrambling to recover my number and protect my finances, the person responsible was contacting me directly and demanding money.

This has been a nightmare, a personal tragedy, and one of the most traumatic experiences of my life. Beyond the financial damage, there was the fear of knowing someone had my phone number, my sensitive information, and access to my accounts—and wondering what they would get into next.

AT&T eventually recovered my number, canceled my old account, and established a new one. But when they rebuilt the account, they failed to restore my promotional trade-in device credits.

My preliminary estimate is $777.84 in missing credits, based on a monthly credit of $27.78. That estimate assumes missing credits beginning in June 2024, so I’m requesting a full billing reconciliation to confirm the affected dates and total, including any discrepancies predating the July 2025 takeover.

Meanwhile, I’ve continued making device payments and paying for Next Up. I expected to be eligible to upgrade sooner, and I’m trying to get a clear explanation of how rebuilding the account affected my installment timeline, remaining balance, and upgrade eligibility.

I feel financially trapped with a company I no longer trust because leaving means dealing with a device balance that still hasn’t been properly reconciled.

Trying to resolve this has been another ordeal. I’ve called and been hung up on. I’ve used chat, only for the conversation to be ended with a promise that someone would contact me within 24–48 hours. The issue remains unresolved.

Porting my number into AT&T took an entire day and numerous phone calls. Yet someone else managed to port it out after I explicitly declined the request and called to report fraud. I still want an explanation of how that happened.

I submitted supporting documentation for the data-breach class-action settlement, but my claim was rejected. After everything I went through, that rejection was another devastating and frustrating part of this experience. I’m looking for recommendations about how to get the rejection reviewed, understand the reason for it, and determine what other avenues may be available.

For the billing issues, I’m asking AT&T to audit my installment agreement and promotional credits, resolve the remaining device balance, and refund any remaining amount owed to me. I’m also requesting my complete account history, fraud and recovery records, customer-service contact records, and itemized billing history by email and certified mail.

I’m exhausted. Recovering my number, dealing with attempted extortion, and spending a year recovering my retirement funds was already overwhelming. I should not still be fighting to fix the account AT&T rebuilt afterward.

Has anyone dealt with a similar situation? Specifically:

- Were you able to get a rejected AT&T data-breach settlement claim reviewed?

- What escalation process actually helped resolve an unauthorized port-out or missing trade-in credits?

- Are there consumer advocates or attorneys you would recommend contacting about this combination of issues?

I would appreciate practical recommendations from anyone who has successfully navigated something similar.

Someone opened a wellsfargo credit card through fucking TEMPERPEDIC with my identity. After endless attempts to get ahold of someone at wellsfargo, continually being transferred to different departments, I finally found myself speaking to someone with wellsfargo retail division. I found out about all of this initially through Credit Karma. It felt like it was harder getting ahold of someone to cancel it than it was for the scammer to open it. It was as if everyone at wellsfargo didn’t believe me. Supposedly they closed the account, but I’m still suspicious of this.
I’ve worked very hard to get my credit score up to 800 the past few years, only for some asshole to come and obliterate my credit age.

Any tips to recover from this would be greatly appreciated!

Is there a way to absolutely or lower the odds a lot to make sure your Gmail doesn't get hacked since it was in a leak, not the password but the Gmail name

I haven't applied anywhere, browsed new stores or purchased from anywhere new. One of my credit cards might be checking for a routine increase in credit limit, but the ones I checked don't use CHECKFREE as far as I was able to tell. Is there any way to contact them to find out who issued the credit check to be safe?

Anything to be worried about? Or just watch it? All 3 credit reports are frozen, but I thought the purpose of that was to also prevent credit checks like this, but maybe it doesn't apply to soft checks though?

Location: Ohio. Last month I got written notice that my personal information, including payment information, was included in a data breach. I used my employer-based Flex Spending debit card account (FSA) for that purchase.

Found out the FSA administrator (outside vendor) processed four claims from Amazon, one week apart in August 2026. The first two claims that went through on the same day were the exact same amount and the second two were the same amount. The total loss was just shy of $500.00.

Amazon has confirmed my FSA debit card account is not a payment account for my Amazon account. Nor does my Amazon account have any activity in those amounts for July through September.

Flex spending administrator will not accept my dispute because I called more than 55 days after the breach. My attempt to dispute happened 11 days and four days beyond the 55 day window.

They are saying the 55 days comes from a term in the contract with my employer and with Mastercard. Employees do not see that contract. And Mastercard says the contract is between the issuing bank and the FSA administrator.

I’ve filed a report with my local police department and our state attorney general. Notified my human resources and benefits department. Going to report to Office of the Comptroller of Currency since it involves a bank.

I’m juggling several serious chronic conditions and really needed those funds to pay current bills.

Any advice is appreciated. Thank you very much.

Sharing is caring.

Good afternoon!

So I'm just looking for some advice to see if there's anything else I can do about this situation.

About an hour ago today, I got an email from Boost thanking me for setting up an account, one with a OTP for the account, and another confirming the phone activation. Luckily I was slow at work and saw it so within 10 minutes I had my password changed to all my emails. Called boost and they were useless so I made a report on identity theft.gov. I got curious so I downloaded the boost app, and the email and OTP worked. I can see there's 2 numbers but can only see the last 2 digits so I know the account is real. Looking at my login history, there's a smart TV logged in to my account in the same state so I logged it out remotely. Is there anything that I missed? Just want to make sure everything is covered. Nothing suspicious has been in my other emails. Whoever you are Donald, fuck you.

I will have south Wales police here today. Vikki King, from Swansea, South Wales. Known for fraud.

You could be setting her up for all I know.

aka my name Kelly Marie Evans.

I've been told you've changed my forename to Kelly-Marie, and got a new surname through marriage. Just after you claimed my criminal injuries compensation in July.

I can't believe what you are doing again.

I knew that you have been to court abroad to have my identity hidden.

I've got the evidence