AT&T Data Breach Settlement: Eligibility, Payouts, and Deadlines

The AT&T data breach settlement is a $177 million class action resolution covering two separate 2024 incidents: a dark web release of personal information for about 73 million current and former customers, and a theft of call and text records for roughly 110 million wireless customers from AT&T’s workspace on the Snowflake cloud platform. The claims filing deadline was December 18, 2025. As of April 2026, Judge Ada Brown in the Northern District of Texas has not yet issued a final approval ruling, so no payments have been distributed.¹

What the Settlement Covers

The $177 million is split into two non-reversionary funds tied to two different breaches. Which fund you can claim from depends on which breach affected you. Both are possible if you were caught in both.²

The larger fund, $149 million, covers the incident AT&T disclosed on March 30, 2024. A data set that had been circulating on hacking forums surfaced publicly that month, and AT&T confirmed it contained information on approximately 7.6 million current account holders and 65.4 million former customers, drawn from data dated 2019 or earlier. Exposed fields included names, email and mailing addresses, phone numbers, dates of birth, Social Security numbers, AT&T account numbers, and account passcodes.³⁴ This is the “AT&T 1” class.

The smaller fund, $28 million, covers the “AT&T 2” class: customers whose call and text metadata was stolen from AT&T’s Snowflake workspace between April 14 and April 25, 2024, and disclosed publicly on July 12, 2024. The stolen records span May 1 through October 31, 2022, plus January 2, 2023, and include phone numbers involved in calls and texts, interaction counts, aggregate call durations, and for some records cell-site identifiers that could approximate a customer’s location. The content of calls and texts was not taken, and neither were Social Security numbers or dates of birth.⁵ The class also reaches customers of mobile virtual network operators that ride on AT&T’s network.⁶

AT&T agreed to the settlement without admitting liability.² A separate $13 million FCC consent decree from September 2024 concerns a different 2023 vendor breach and is not part of this settlement.

Who Qualifies

The AT&T 1 class covers any living U.S. person whose personal data (names, addresses, phone numbers, email addresses, dates of birth, account passcodes, billing account numbers, or Social Security numbers) appeared in the dark web data set announced March 30, 2024.⁷

The AT&T 2 class covers AT&T account owners, line users, and end users, including MVNO customers on AT&T’s network, whose phone numbers and related call and text metadata were involved in the Snowflake breach announced July 12, 2024.⁷

People in both classes could file claims under both, provided they documented separate losses for each.

How Much You Can Receive

Claimants had two paths.

Documented out-of-pocket losses. AT&T 1 members could claim up to $5,000 for losses occurring in 2019 or later that trace back to the breach. AT&T 2 members could claim up to $2,500 for losses on or after April 14, 2024. Both paths require third-party documentation such as bank statements or credit reports; self-prepared documents don’t count.⁷

Flat tier payments with no documentation. The settlement sets three tiers:

Tier 1: AT&T 1 members whose Social Security number was exposed. Pro rata share worth five times the Tier 2 amount.
Tier 2: AT&T 1 members whose Social Security number was not exposed. Pro rata share from the $149 million fund.
Tier 3: AT&T 2 account owners. Pro rata share from the $28 million fund.⁷

The per-person dollar figure for tier payments isn’t set. It depends on how many valid claims come in and what’s left in each fund after administrative costs, attorney fees, and service awards are paid.⁸ Class counsel intends to seek up to one-third of each fund in fees, and class representatives are eligible for $1,500 service awards.²

Deadlines and Case Status

Judge Brown granted preliminary approval on June 20, 2025.² Under the amended schedule:

Opt-out and objection deadline: November 17, 2025.
Claims filing deadline: December 18, 2025.
Final approval hearing: January 15, 2026.⁹¹

All three of those dates have passed. If you didn’t submit a claim by December 18, 2025, and didn’t opt out, you’re still in the class and bound by the settlement’s release, but you won’t receive a payment.

Roughly twenty individuals filed formal objections before the November deadline, and a handful of class members opted out. Earlier attempts by outside groups to intervene, including one appeal to the Fifth Circuit that was dismissed in October 2025, were resolved before the final hearing.¹⁰

When Payments Will Go Out

Nothing pays yet. Three things have to happen first: Judge Brown must grant final approval, the appeal period has to run out with no appeal pending, and Kroll Settlement Administration has to finish reviewing the claim forms it received.¹ The court appointed Richard J. Arsenault as Special Claims Administration Master in September 2025 to oversee that review, including screening for fraudulent claims and handling disputes over rejected or reduced ones.¹¹

As of April 2026, the final approval ruling still hasn’t issued, even though the hearing was held on January 15, 2026.¹ There’s no published timeline for a decision.

Checking Your Claim and Avoiding Scam Sites

The only court-authorized website for this settlement is telecomdatasettlement.com. The settlement administrator’s phone line is (833) 890-4930.¹ Fake claim sites have been reported targeting people who expect payouts from large class actions like this one, so be wary of any site or message that asks for Social Security numbers, banking information, or a “processing fee” to release your settlement money. Legitimate class action administrators don’t charge claimants to receive payment.

1
TelecomDataSettlement.com. AT&T Data Incident Settlement
2
U.S. District Court, Northern District of Texas. Preliminary Approval Order, MDL 3114
3
AT&T. Addressing Data Set Released on Dark Web
4
CPM Legal. Settlement of AT&T Data Breach Affecting 73 Million Customers
5
Cybersecurity Dive. AT&T Cyberattack in Snowflake Environment
6
Computer Weekly. AT&T Loses Nearly All Phone Records in Snowflake Breach
7
TelecomDataSettlement.com. AT&T Data Incident Settlement – FAQ
8
Clarion Ledger. How Much Money Can You Get From the AT&T Settlement
9
U.S. District Court, Northern District of Texas. MDL 3:24-md-03114
10
CourtListener. In Re AT&T Inc. Customer Data Security Breach Litigation Docket
11
U.S. District Court, Northern District of Texas. Case Management Order No. 15, MDL 3114