Millions of current and former AT&T customers may share in a $177 million settlement after data breaches exposed personal information.