AT&T Class Action Settlement via Kroll: $177M Payout and Claim Status

The AT&T class action settlement administered by Kroll is a $177 million deal resolving two 2024 data breaches that exposed personal information belonging to tens of millions of current and former AT&T customers. The claim filing window closed on December 18, 2025, and no money has gone out yet. A final approval hearing was held on January 15, 2026, but as of April 23, 2026, Judge Ada E. Brown of the Northern District of Texas had not ruled.¹

Which Breaches the Settlement Covers

The settlement resolves two separate incidents, called AT&T 1 and AT&T 2 in the case filings.

AT&T 1 refers to a data set that surfaced on the dark web in March 2024. The data appeared to date from 2019 or earlier and affected roughly 7.6 million current account holders and 65.4 million former customers, about 73 million people in all. The exposed fields included names, email and physical addresses, dates of birth, Social Security numbers, and AT&T account passcodes.² AT&T acknowledged the leak on March 30, 2024, and reset passcodes for affected current customers, while saying it had no evidence of unauthorized access to its own systems.³

AT&T 2 refers to a separate intrusion into AT&T’s environment on the Snowflake cloud platform between April 14 and April 25, 2024. Hackers took call and text records for roughly 110 million cellular customers, covering interactions from May through October 2022 plus January 2, 2023. The stolen data included phone numbers, interaction counts, and aggregate call durations. It did not include the content of calls or texts, names, Social Security numbers, or financial information.⁴ The Snowflake accounts involved lacked multifactor authentication.⁵

If you were affected by both incidents, you were eligible to file separate claims under each class, with separate documentation for each.⁶

How Much Money Is Available

The $177 million is split into two non-reversionary cash funds: $149 million for the AT&T 1 class and $28 million for the AT&T 2 class.⁷ Settlement administration costs, attorneys’ fees, and service awards for the named plaintiffs come out of each fund before class members are paid. The plaintiffs’ lawyers are seeking about $59 million in fees combined, roughly a third of the total, subject to Judge Brown’s approval.⁸

Class members had two ways to claim.

The first was a documented loss payment. If you could show out-of-pocket losses traceable to the breaches, you could claim up to $5,000 for AT&T 1 (for losses since 2019) or up to $2,500 for AT&T 2 (for losses on or after April 14, 2024). Acceptable proof included receipts, account statements, and records of identity monitoring fees. Handwritten receipts or personal affidavits on their own were not enough.⁹

The second was a tiered cash payment for people without documented losses, drawn from a pro-rata share of whatever remained in each fund. In the AT&T 1 class, Tier 1 members (Social Security number exposed) receive five times the payment of Tier 2 members (other data exposed but not SSN). In the AT&T 2 class, account owners fall into Tier 3 and split the AT&T 2 net fund equally.¹

A person affected by both breaches could theoretically collect up to $7,500 in documented losses.⁶ Actual per-person amounts for the tiered payments are not yet known because they depend on the volume of valid claims and the final deductions from each fund. Approximately 4.38 million claims were submitted by the end of December 2025.¹⁰

AT&T agreed to the settlement without admitting liability, saying it did so to avoid the expense and uncertainty of continued litigation.¹¹

Where Things Stand Now

Judge Brown granted preliminary approval on June 20, 2025, and Kroll sent class notices by email and postcard beginning in August 2025.² The claim deadline was December 18, 2025, and it has not been reopened. A six-hour final approval hearing took place on January 15, 2026, but no ruling had been issued as of the settlement website’s last update on April 23, 2026.¹

Kroll is reviewing and processing the submitted claims. No payments will be distributed until the court grants final approval and any appeal period runs out.¹

How to Contact Kroll About Your Claim

Kroll Settlement Administration LLC is the court-approved administrator and runs the official website at telecomdatasettlement.com.¹² If you filed a claim and need to check on it, ask a question, or update your address so a check can reach you, you can reach Kroll by phone at (833) 890-4930 or by mail at:

AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324⁹

Legitimate settlement emails come from attsettlement@e.emailksa.com. Messages asking you to pay a fee or share bank credentials to “release” your payment are not from Kroll.¹³

1
Telecom Data Settlement. AT&T Data Incident Settlement
2
CPM Legal. CPM Announces Settlement of AT&T Data Breach
3
AT&T. Addressing Illegal Access to Customer Data
4
Mozilla Foundation. AT&T Had a Huge Data Breach
5
Cybersecurity Dive. AT&T Cyberattack on Snowflake Environment
6
Yahoo Finance. AT&T Data Breach Class Action
7
Wolters Kluwer. AT&T Settlement Agreement
8
Greenwich Time. AT&T Data Breach Settlement Attorney Fees
9
Telecom Data Settlement. Frequently Asked Questions
10
New Haven Register. AT&T Data Breach Settlement Attorney Fees
11
CNN. AT&T Data Leak Settlement
12
U.S. District Court for the Northern District of Texas. Settlement Administration Order
13
CBS News. AT&T Data Breach Settlement Kroll