Kroll Settlement Administration LLC is the court-appointed administrator for the AT&T data breach settlement, a $177 million class action resolution now awaiting a final approval ruling from U.S. District Judge Ada Brown. Kroll runs the official claims website, sent notices to eligible customers, processed roughly 4.38 million claim forms filed by the December 18, 2025 deadline, and will handle payments if and when the court signs off. As of an April 23, 2026 update on the official settlement site, no ruling has issued and no payment timeline exists.1Telecom Data Settlement. In re AT&T Inc. Customer Data Security Breach Litigation Settlement
What Kroll Is Doing on This Case
Judge Brown appointed Kroll as the settlement administrator in the consolidated litigation, In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3114 in the Northern District of Texas.2U.S. District Court for the Northern District of Texas. Court Notice, In re AT&T Inc. Customer Data Security Breach Litigation Kroll is one of the larger claims administrators in the country and reports having managed more than 4,000 settlements and distributed more than $30 billion over a 50-year history.3Kroll. Settlement Administration
On this matter, Kroll operates the official settlement website at telecomdatasettlement.com, sent notices to eligible customers by email from attsettlement@e.emailksa.com, received and processed claim forms, reviews the documentation submitted with claims for financial losses to confirm they are traceable to the breaches, and will handle disbursements once payments are approved.4CBS News. AT&T Data Breach Settlement Kroll: How to File a Claim Claimants filed online through the website or by mail to Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. Kroll’s phone line at (833) 890-4930 remains available for questions.5NBC Connecticut. AT&T Data Breach Settlement Deadline December 18 Kroll’s administrative fees are paid out of the settlement funds themselves, allocated between the two cases based on the work each required.6CCH. AT&T Data Breach Settlement Agreement
The Two Breaches Behind the Settlement
The settlement resolves claims from two separate 2024 incidents. In March 2024, AT&T confirmed that a data set containing customer records had appeared on the dark web. The exposed records dated to 2019 or earlier and affected roughly 7.6 million current account holders and 65.4 million former account holders. Compromised fields included Social Security numbers, names, email and mailing addresses, phone numbers, dates of birth, AT&T account numbers, and account passcodes.7AT&T. Addressing Data Set Released on Dark Web
In July 2024, AT&T disclosed a second breach involving the illegal download of customer call and text records from a third-party cloud platform later identified as Snowflake. The stolen data covered calls and texts from May 1 through October 31, 2022, for nearly all AT&T cellular customers, plus a small subset from January 2, 2023. It included metadata such as phone numbers that interacted with AT&T numbers, interaction counts, aggregate call durations, and in some cases cell-site identification numbers. It did not include call or text content, Social Security numbers, or customer names.8PBS NewsHour. AT&T Says Data of Nearly All Customers Downloaded in a Security Breach
What the Settlement Pays
AT&T agreed to pay $177 million into two non-reversionary, all-cash funds, denying liability but resolving the litigation. The money is split $149 million for the AT&T 1 Settlement Class (March 2024 dark web leak) and $28 million for the AT&T 2 Settlement Class (July 2024 Snowflake breach).9ABC7 News. AT&T Data Breach $177 Million Settlement Payments to claimants come from the net funds after administration costs, court-approved attorney fees, and service awards are deducted.6CCH. AT&T Data Breach Settlement Agreement
Class members had two ways to claim. Those who could document specific financial losses fairly traceable to the breaches could seek up to $5,000 from the AT&T 1 fund (for losses in 2019 or later) or up to $2,500 from the AT&T 2 fund (for losses on or after April 14, 2024). People affected by both breaches, called overlap class members, could seek up to $7,500 combined.10Time. AT&T Data Breach Settlement: How to File a Claim Claimants who did not document losses could elect a pro rata cash payment. Under the AT&T 1 fund, Tier 1 covers people whose Social Security numbers were exposed and pays five times the Tier 2 amount; Tier 2 covers other exposed data. The AT&T 2 fund uses a single tier for account owners.11Citizen-Times. How Much Will Each Customer Get From AT&T Settlement Exact per-person amounts depend on how many valid claims Kroll approves and what remains after fees and costs.
Who Qualified
The AT&T 1 class includes all living U.S. residents whose personal data elements were part of the March 2024 dark web leak. The AT&T 2 class covers AT&T account owners and authorized line or end users whose call and text metadata was involved in the Snowflake breach, plus individuals whose phone numbers interacted with those AT&T customers during the affected period.6CCH. AT&T Data Breach Settlement Agreement
Deadlines and Claims Filed
Judge Brown granted preliminary approval on June 20, 2025, and the court later amended the schedule, pushing key dates back by roughly two months:12U.S. District Court for the Northern District of Texas. MDL 324 MD 03114
- Opt-out and objection deadline: November 17, 2025.
- Claim submission deadline: December 18, 2025.
- Final approval hearing: January 15, 2026.
By December 30, 2025, roughly 4.38 million people had filed claims through Kroll, a 4.8 percent claims rate among the nearly 100 million eligible customers.13CT Post. AT&T Data Breach Settlement Claims Filed The claim deadline has passed. New submissions are no longer being accepted.
Where the Case Stands
Judge Brown held a six-hour final approval hearing on January 15, 2026, taking testimony from plaintiffs’ attorneys, defense counsel, and objectors. The hearing covered both the fairness of the settlement and a $59 million attorney fee request from plaintiffs’ counsel, equal to one-third of the fund.14Greenwich Time. AT&T Data Breach Settlement Attorney Fees A group identified as the “Udell Objectors” surfaced before the hearing; the court addressed related discovery disputes but denied the associated motions as moot in January 2026.15CourtListener. In re AT&T Inc. Customer Data Security Breach Litigation Docket
The court has not yet ruled. Kroll continues to review submitted claims in the meantime.1Telecom Data Settlement. In re AT&T Inc. Customer Data Security Breach Litigation Settlement
When Payments Would Go Out
If Judge Brown grants final approval, payments will not begin until two things happen: any appeals are resolved, and Kroll finishes reviewing every claim form. The official settlement website states there is no known timeline for the court’s decision.1Telecom Data Settlement. In re AT&T Inc. Customer Data Security Breach Litigation Settlement Claimants who filed on time should watch for updates from Kroll at the address they provided; the administrator will send payment notifications through the same channels used for the original notices.
Separate Actions Involving AT&T
Two other proceedings involve the same underlying events but are not part of the Kroll-administered class action. The Federal Communications Commission reached its own $13 million settlement with AT&T in September 2024 over a vendor cloud breach, under which AT&T agreed to consumer privacy upgrades and a data protection program.16Federal Communications Commission. FCC EB Settles AT&T Vendor Cloud Breach That enforcement action does not pay consumers. Separately, AT&T remains a named defendant in In re: Snowflake, Inc., Data Security Breach Litigation, MDL No. 3126, in the District of Montana under Chief Judge Brian Morris, alongside Snowflake and other corporate clients of the cloud platform.17U.S. District Court for the District of Montana. Snowflake Data Security Breach Litigation Claims against Snowflake itself are not resolved by the $177 million deal.