AT&T will have to pay users affected by data breaches, if they make a claim for their piece of the $177 settlement.