The claim form for the AT&T data breach settlement is no longer available. The filing deadline was December 18, 2025, and the settlement administrator is not accepting late submissions.1Telecom Data Settlement. In Re: AT&T Inc. Customer Data Security Breach Litigation If you filed one before the cutoff, your next milestone is the court’s ruling on final approval; the fairness hearing was held on January 15, 2026, and no payments can go out until that ruling is final and any appeals are resolved.
The Filing Window Is Closed
Online claims had to be submitted by 11:59 p.m. Central Time on December 18, 2025. Paper forms needed a postmark of the same date.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A Both were strict deadlines. Forms received or postmarked after that date are not processed, and the settlement website has stopped taking new submissions.
If you missed the deadline, there is no separate late-claim process built into this settlement, and you cannot sue AT&T on your own for the same breaches unless you formally opted out in writing before the exclusion deadline in late November 2025. That point matters even for people who never intended to participate, and it’s covered in more detail below.
What the Claim Form Asked For
The form gave claimants a choice between two payment tracks. Which one you picked shaped what you had to submit and what you can expect to receive.
Standard Cash Payment
The standard option was for class members who wanted a share of the fund without documenting specific losses. It asked for your full legal name, mailing address, the AT&T account number tied to the breach, and the Class Member ID and Confirmation Code printed on your notice. No receipts, no proof of harm. The tradeoff is that standard payments are subject to pro-rata adjustment: if the number of valid claims is high, individual payments shrink; if it’s lower, they can grow.
Documented Loss Payment
Claimants who actually spent money because of the breaches could seek reimbursement instead, up to $5,000 per person from the first breach fund and up to $2,500 from the second.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A Eligible costs included credit monitoring, professional identity theft restoration services, and charges tied to fraudulent transactions. Each expense needed supporting documentation — bank statements, invoices, receipts with dates and amounts — showing the cost was reasonably traceable to one of the two AT&T breaches.
Self-prepared documents alone were not enough. Handwritten receipts, personal accountings, and sworn statements could supplement other evidence but could not stand as the sole basis for reimbursement.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A People who were affected by both breaches could file against both funds, but the same receipt could not be counted twice.
Who Was Eligible to File
The settlement covered two classes of AT&T customers, and you could belong to one or both.
- The AT&T 1 class included U.S. residents whose personal data elements — Social Security numbers, account details, passcodes — appeared in the first breach, which was discovered on the dark web in March 2024 but traced to an incident around 2019 or earlier.
- The AT&T 2 class included AT&T account owners, line users, and end users whose phone numbers, call records, text interaction counts, or aggregate call durations were involved in the second breach announced in July 2024. A small subset also had cell site identification numbers exposed.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A
Eligibility was determined by AT&T’s records, not self-identification. AT&T and the administrator, Kroll, matched the compromised data against the company’s customer database and sent personalized notices by email or mail, each containing a unique Class Member ID and Confirmation Code. A lookup tool on the settlement website let people who never received a notice check their status by ID, email, account number, or name.3NBC 5 Dallas-Fort Worth. Who Is Eligible for the AT&T Settlement? Here’s How to File Claim
What Happens Now if You Filed
The court held its final fairness hearing on January 15, 2026, at 9:00 a.m. Central Time to decide whether the settlement is fair and reasonable. As of early 2026, the ruling had not been publicly announced. Payments cannot be distributed until the judge grants final approval and any appeals are resolved, which can add months beyond the hearing date.
Kroll reviews each claim for completeness. If something is missing or inconsistent, the administrator issues a Notice of Deficiency; ignoring it means the claim is treated as invalid.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A Keep the mailing address and email you used on the form current through the settlement website, and watch for administrator correspondence. Kroll can be reached at 833-890-4930 for status questions.
The total fund is $177 million, split into roughly $149 million for the first breach class and $28 million for the second. Attorney fees, litigation expenses, and service awards for the class representatives come out of those pools before individual payments are calculated. No specific per-person figure is guaranteed for standard claims, and final amounts will depend on how many valid claims Kroll approves.
Taxes on Any Payment You Receive
Data breach settlement payments generally count as taxable income. IRC Section 61 treats all income as taxable unless a specific exemption applies, and the Section 104(a)(2) exclusion for personal physical injury damages does not cover data breach recoveries. Payments for non-physical harm — including privacy violations and emotional distress — are includable in gross income.4Internal Revenue Service. Tax Implications of Settlements and Judgments
If your payment reaches $600 or more, expect a 1099 from the administrator. Amounts below that threshold are still technically reportable. Setting aside a portion of any payment for taxes is prudent, and if you claimed a large documented loss, talk to a tax professional before filing your return.
Rights You Gave Up by Not Opting Out
Anyone in the two settlement classes who did not formally exclude themselves in writing before the opt-out deadline — roughly late November 2025, 45 days before the fairness hearing — is bound by the settlement’s release of claims once it becomes final. That release applies whether or not you filed a claim. Even class members who submitted nothing and receive no money can no longer sue AT&T, its affiliated companies, or its vendors (including Snowflake, Inc.) over anything tied to these two breaches.2Wolters Kluwer. AT&T Settlement Agreement – Exhibit A
Both the opt-out and the objection windows are closed. If you’re inside the class and did not act by the deadline, the release will apply to you once the court’s approval is final.