Skip to content

AT&T data breach settlement: When payments could arrive

AT&T $177 mn data breach settlement: When payments could arrive

Millions of current and former AT&T customers, including Texans affected by two major data breaches in 2024, could begin receiving settlement payments following a federal court’s approval of a $177 mn class action agreement.

The US District Court for the Northern District of Texas granted final approval on October 2, 2026, clearing an important legal requirement before compensation can be distributed to eligible claimants.

  • A federal court approved AT&T’s $177 mn settlement on October 2, 2026, resolving litigation over two data breaches disclosed in March and July 2024.
  • Settlement payments could begin after November 12, with distribution required within 60 days of the effective date, provided no appeals delay the process.
  • Eligible claimants may receive up to $5,000 for documented losses linked to the March breach or $2,500 for the July incident. The claims deadline was December 18, 2025.

The agreement establishes two settlement funds covering separate incidents disclosed by AT&T in March and July 2024. The first allocates $149 mn to individuals affected by the March disclosure, while the second provides $28 mn for those whose information was involved in the July incident.

Under the settlement terms, approved payments must be distributed electronically or by paper check within 60 days of the agreement’s effective date.

That date has not yet been officially established. If no appeal or deadline-extending motion is filed, the settlement could become effective around November 12, potentially allowing payments to begin later in November.

The settlement provides different compensation arrangements depending on which incident affected an individual, the information exposed and whether the claimant documented financial losses.

When will AT&T settlement payments be issued?

The October 2 final approval order established the legal basis for distributing compensation, but payments are not required to begin immediately.

According to the settlement agreement and the court’s memorandum opinion, compensation must be distributed within 60 days of the “Effective Date.”

The agreement defines that date as 10 days after the deadline for appealing the final approval order expires, provided no appeal is filed.

Under Federal Rule of Appellate Procedure 4(a)(1)(A), the ordinary deadline for filing an appeal is 30 days after the judgment or order is entered.

Because the court approved the settlement on Friday, October 2, the 30-day period falls on Sunday, November 1. The applicable deadline therefore extends to Monday, November 2.

If that period expires without an appeal or other motion affecting the timetable, the agreement could take effect around Thursday, November 12.

Based on that estimated effective date, the 60-day distribution window would extend to approximately January 11, 2027.

These dates are projections based on the settlement’s legal provisions rather than an officially announced payment schedule.

An appeal would change the timetable. The agreement specifies that, if an appeal is filed, the effective date generally becomes 30 days after the final appellate ruling affirming approval or 30 days after dismissal of the appeal when no further right to appeal remains.

Consequently, claimants should not interpret November 12 as a guaranteed payment date. The settlement administrator must also complete the necessary claims administration before eligible payments can be issued.

Who qualifies for the AT&T $177 mn settlement?

The settlement covers two distinct groups of individuals affected by the company’s 2024 data incidents.

The AT&T 1 Settlement Class includes living individuals in the United States whose personal information was included in the data incident announced on March 30, 2024.

The affected information varied by individual and could include names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers and Social Security numbers.

AT&T previously disclosed that approximately 7.6 mn active customers and 65.4 mn former customers were affected by the data exposure. The company said the information appeared to originate from 2019 or earlier.

The AT&T 2 Settlement Class covers account owners, line users and end users whose data was involved in the incident disclosed on July 12, 2024. That incident concerned information illegally downloaded from an AT&T workspace hosted on a third-party cloud platform operated by Snowflake.

The affected information included telephone numbers belonging to current and former customers, numbers with which those customers interacted, counts of those interactions and aggregated call durations.

For a smaller group, the affected records also included one or more cell site identification numbers associated with communications.

Individuals whose information was involved in both incidents may qualify for membership in both settlement classes, subject to the agreement’s eligibility and compensation rules.

Certain exclusions apply, including individuals who validly opted out of the settlement. The settlement administrator, Kroll Settlement Administration, sent email notifications to eligible class members.

Anyone uncertain about their eligibility or the status of a previously submitted claim can contact the administrator at (833) 890-4930.

How much money can AT&T settlement claimants receive?

Individual compensation depends on the relevant settlement class, the type of payment requested and whether the claimant supplied documentation of financial losses.

The agreement offers compensation of up to $5,000 for qualifying documented losses associated with the March 2024 incident and up to $2,500 for qualifying losses associated with the July incident.

These figures represent maximum documented-loss payments, not guaranteed amounts for every eligible customer.

For the AT&T 1 Settlement Class, individuals could claim up to $5,000 for documented losses incurred in 2019 or later, provided they could demonstrate that those losses were fairly traceable to the March data incident.

Alternatively, class members could elect a tiered cash payment without submitting a documented-loss claim.

The tiered payment structure distinguishes between individuals whose Social Security numbers were exposed and those whose other personal information was included in the incident.

  • Tier 1 applies to individuals whose Social Security numbers were involved in the March disclosure.
  • Tier 2 covers those whose information was exposed but did not include Social Security numbers.
  • Under the agreement, a Tier 1 payment is calculated at five times the amount of a Tier 2 payment.

Both categories receive proportional shares of the net AT&T 1 settlement fund, meaning the amounts depend on the number and value of valid claims and the deductions permitted under the agreement.

For the AT&T 2 Settlement Class, eligible individuals could seek documented-loss compensation of up to $2,500 for losses incurred on or after April 14, 2024.

Those losses must also be supported by documentation showing a reasonable connection to the July data incident. Account owners were permitted to submit claims for themselves and on behalf of qualifying line or end users.

An alternative Tier 3 cash payment was available to qualifying account owners. That payment represents a proportional share of the net AT&T 2 settlement fund.

The final distribution amounts depend on administrative expenses, court-approved attorneys’ fees, litigation costs, service awards and the number of valid claims.

As a result, eligibility for a settlement class does not automatically mean a claimant will receive the maximum advertised compensation.

Why did AT&T agree to the data breach settlement?

The litigation followed AT&T’s disclosure of two separate incidents involving customer information in 2024.

On March 30, the telecommunications company announced that AT&T-specific data fields had appeared in a dataset published on the dark web.

Lawsuits were subsequently filed against AT&T in state and federal courts across the United States.

Those cases were consolidated in June 2024 in the Northern District of Texas under the title In re AT&T Inc. Customer Data Security Breach Litigation.

The second incident was announced on July 12, when AT&T confirmed that certain customer information had been illegally downloaded from its workspace on Snowflake’s cloud infrastructure.

Litigation arising from that incident was consolidated with other Snowflake-related cases in the US District Court for the District of Montana in October 2024.

The consolidated complaints alleged that customers had experienced financial and personal consequences following the incidents.

Among the allegations were claims that savings had been fraudulently withdrawn from accounts, unauthorized loans had been opened using affected individuals’ identities, and credit scores had deteriorated because of fraudulent activity.

These were allegations made by plaintiffs rather than judicial findings establishing that AT&T was responsible for each reported loss.

Representatives involved in the litigation pursued mediation, with the parties reaching agreements in principle in March 2025. The settlement negotiations produced two funds: $149 mn for the March incident and $28 mn for the July incident, totaling $177 mn.

The parties subsequently agreed to resolve both sets of claims through a consolidated settlement in the Northern District of Texas.

A consolidated class action complaint was filed on May 30, 2025, and the court granted preliminary settlement approval in June. The agreement resolves the litigation without AT&T admitting liability or wrongdoing.

AT&T settlement claims deadline closed in December 2025

The opportunity to submit new claims has already expired. According to the official settlement website, the deadline for submitting or mailing a claim form was Thursday, December 18, 2025. The deadline to opt out of the settlement or submit an objection was November 17, 2025.

A final approval hearing took place on January 15, 2026, before the court issued its approval order on October 2.

The remaining process concerns the settlement becoming effective and the administration of valid claims submitted before the deadline.

Customers who previously submitted claims can consult the official settlement website at TelecomDataSettlement.com for information about the agreement and payment procedures.

The website also provides settlement documents, eligibility explanations and contact information for Kroll Settlement Administration.

Claimants should distinguish between the total settlement amount and their individual awards. The $177 mn fund covers compensation across both incidents as well as permitted administrative and legal expenses.

For qualifying individuals who requested documented-loss compensation, payment amounts are determined by the supporting evidence and applicable settlement limits.

For those who selected tiered compensation, the final award depends on the available net fund and valid claims in the relevant category.

What happens next for AT&T settlement recipients?

The next significant deadline is November 2, when the ordinary 30-day appeal period following the October 2 approval order is expected to expire. If no appeal or deadline-extending motion intervenes, the settlement’s effective date could fall around November 12.

Payments would then be subject to the agreement’s 60-day distribution requirement, with eligible claimants receiving compensation through electronic payments or mailed checks.

Any appeal could postpone the effective date and consequently delay the distribution schedule.

For claimants who submitted valid applications before December 18, 2025, the next step is to follow communications from the settlement administrator rather than submit a new claim.

The court-approved agreement establishes the $149 mn and $28 mn funds and the eligibility requirements for compensation. It does not guarantee a particular payment date or the maximum award to every claimant.

The official settlement administrator remains the source for updates on payment processing, individual claims and the final distribution timetable.