AT&T Data Breach Lawsuit: Kroll’s $177M Settlement and Claims

The AT&T Kroll data breach settlement is a $177 million class action resolution covering AT&T’s two 2024 data breaches, administered by Kroll Settlement Administration LLC under the consolidated case In Re: AT&T Inc. Customer Data Security Breach Litigation in the Northern District of Texas. The claim filing window closed on December 18, 2025, and as of mid-2026 no payments have gone out because Judge Ada Brown has not yet issued a ruling on final approval after the January 15, 2026 hearing.1Telecom Data Settlement. AT&T Data Incident Settlement – FAQ

What the Settlement Covers

The money resolves claims tied to two separate incidents AT&T disclosed months apart in 2024.

The first was a dark web data leak announced on March 30, 2024. A dataset dating from 2019 or earlier surfaced online containing names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, AT&T account numbers, and account passcodes. Roughly 7.6 million current and 65.4 million former account holders were affected, about 73 million people in total.2AT&T. Addressing Data Set Released on Dark Web

The second was disclosed via SEC filing on July 12, 2024. Attackers accessed an AT&T workspace on the Snowflake cloud platform between April 14 and April 25, 2024, and made off with call and text metadata for nearly all AT&T wireless customers, close to 110 million people. The stolen records covered mostly May through October 2022 and included the phone numbers customers interacted with, interaction counts, and aggregate call durations. For a subset, cell site identifiers were also exposed. Call and text content, Social Security numbers, dates of birth, and customer names were not part of this breach.3Cybersecurity Dive. AT&T Cyberattack Snowflake Environment4Computer Weekly. AT&T Loses Nearly All Phone Records in Snowflake Breach

The $177 million fund is split accordingly: $149 million for the AT&T 1 class (the dark web leak) and $28 million for the AT&T 2 class (the Snowflake breach). The settlement is all cash. It does not require AT&T to make specific cybersecurity changes, and AT&T denied all allegations.5CBS News. AT&T Data Breach Settlement Kroll How To File Claim6Business CCH. AT&T Settlement Agreement

Who Qualified and What They Could Recover

The AT&T 1 class covers all living U.S. residents whose personal information was part of the March 2024 dark web dataset, current and former customers alike. The AT&T 2 class covers AT&T account owners, line users, and end users whose phone numbers and metadata were involved in the Snowflake breach, and it extends to individuals whose numbers interacted with those customers. People who fell into both classes could claim from both, subject to a combined cap of $7,500.7Time. AT&T Data Breach Settlement How To File a Claim6Business CCH. AT&T Settlement Agreement

Payments were structured in tiers. Under the AT&T 1 class, claimants who could document losses fairly traceable to the breach from 2019 forward could receive up to $5,000. Those without documentation received a pro rata share, with Tier 1 payments (Social Security number exposed) set at five times Tier 2 payments (other data exposed but not the SSN).8Telecom Data Settlement. AT&T Data Incident Settlement

Under the AT&T 2 class, documented losses were capped at $2,500 for losses on or after April 14, 2024. Otherwise, account owners could take a Tier 3 pro rata share of what remained in the AT&T 2 fund. Account owners were allowed to file on behalf of line and end users.6Business CCH. AT&T Settlement Agreement

Actual per-person payments are not yet known. They depend on how many valid claims Kroll received and how much of the fund is left after administrative costs, attorneys’ fees, and service awards come out.

Where Things Stand

The settlement has moved through most of its procedural milestones:

As of mid-2026, no ruling on final approval has issued. Kroll is continuing to review and process the claims it received. Payments cannot go out until the court approves the settlement and any appeal window closes, and the administrator has said it does not know how long the court will take.1Telecom Data Settlement. AT&T Data Incident Settlement – FAQ

If you missed the December 18, 2025 deadline, there is no reopened filing window. The claim form is down, and the settlement website does not currently offer a late-claim mechanism.

How to Reach Kroll

Kroll runs the official website at telecomdatasettlement.com and is the only entity authorized to process claims and eventually distribute payments. Notice emails went out from the domain attsettlement@e.emailksa.com, which created some initial confusion about whether the messages were legitimate; they were.5CBS News. AT&T Data Breach Settlement Kroll How To File Claim

You can reach Kroll by phone at (833) 890-4930 or by mail at AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. The website also has a contact form and is where Kroll says it will post updates as the case moves.8Telecom Data Settlement. AT&T Data Incident Settlement

Attorneys’ Fees and Service Awards

Class counsel asked the court for $59 million in fees, roughly a third of the fund. The Lanier team requested about $49.67 million plus up to $564,792 in litigation costs, and the Ostrow-led team requested about $9.33 million plus up to $231,438 in costs. The court has not yet ruled on the fee petition.11New Haven Register. AT&T Data Breach Settlement Attorney Fees Class representatives were eligible for $1,500 service awards subject to court approval.12U.S. District Court, Northern District of Texas. Preliminary Approval Order, MDL 3114 Whatever the court awards will come out of the $177 million before per-claimant checks are calculated.

Not the Same as the FCC Actions

This class action settlement is separate from the FCC’s regulatory penalties against AT&T. The FCC’s September 2024 $13 million consent decree over a January 2023 vendor cloud breach and its earlier 2015 $25 million settlement over three prior breaches are their own matters and do not send checks to class members here.13FCC. FCC Settles AT&T Vendor Cloud Breach14FCC. AT&T Pay 25M Settle Investigation Three Data Breaches Payments to consumers under the $177 million settlement will come only from Kroll, only after final approval, and only to people who filed a valid claim by December 18, 2025.