AT&T settled a $177 million class-action lawsuit last year, agreeing to pay customers impacted by two separate data breaches.