AT&T has agreed to pay $177 million to resolve class action claims over its two 2024 data breaches, with individual payments of up to $5,000 for the March 2024 dark web leak and up to $2,500 for the July 2024 Snowflake-related theft of call and text records. People affected by both incidents can claim from each fund, for a combined maximum of $7,500. As of April 2026, the AT&T data breach settlement had received preliminary approval but not final approval, and no money has been paid out.
Which Breaches the Settlement Covers
The settlement resolves claims from two separate incidents AT&T disclosed months apart in 2024, and eligibility depends on which one affected you.
The first, referred to in the settlement as AT&T 1, involved a data set that surfaced on the dark web in March 2024 containing information on roughly 73 million current and former customers. The exposed fields included names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, account numbers, and account passcodes.1NBC Chicago. Deadline Nears for AT&T Data Settlement Breach With Payouts Up to $7,500 The data appeared to date from 2019 or earlier.2AT&T. Addressing Data Set Released on Dark Web
The second, AT&T 2, was disclosed in July 2024. Attackers accessed an AT&T workspace on the third-party cloud platform Snowflake and downloaded call and text metadata for nearly all AT&T cellular customers, along with customers of mobile virtual network operators using AT&T’s network. The stolen records included phone numbers customers interacted with, the frequency of those interactions, and aggregate call durations. The content of calls and texts, customer names, and Social Security numbers were not included. About 110 million customers were affected.3Cybersecurity Dive. AT&T Cyberattack in Snowflake Environment
AT&T denied wrongdoing and agreed to settle to avoid the cost and uncertainty of further litigation.4CNN. AT&T Data Leak Settlement The two funds are non-reversionary: $149 million for the AT&T 1 class and $28 million for the AT&T 2 class.5Yahoo Finance. AT&T Data Breach Settlement Nearing
Who Qualifies
The AT&T 1 class includes all living U.S. residents whose personal information was part of the March 2024 dark web leak, an estimated 73 million people.
The AT&T 2 class covers AT&T account owners, line users, and end users whose call and text metadata was involved in the July 2024 breach. Account owners were permitted to submit claims on behalf of the line or end users on their account.6CCH. AT&T Settlement Agreement
Roughly 6.2 million people fall into both classes and were eligible to claim from both funds.5Yahoo Finance. AT&T Data Breach Settlement Nearing The settlement administrator, Kroll Settlement Administration, mailed notices to approximately 99.7 million people starting in August 2025.7New Haven Register. AT&T Data Breach Settlement Attorney Fees If you received a notice, that mailing identifies which class or classes you belong to.
How Much You Can Get
Claimants had two ways to seek payment.
The first option was a documented loss payment. AT&T 1 class members could claim up to $5,000 for losses occurring in 2019 or later, and AT&T 2 class members could claim up to $2,500 for losses on or after April 14, 2024. Claimants had to show that their financial losses traced back to the relevant breach.8Telecom Data Settlement. AT&T Data Incident Settlement
The second option was a tiered cash payment, calculated pro rata from each fund without any need to document specific losses. Tier 1 covered AT&T 1 class members whose Social Security numbers were exposed, at five times the per-person amount of Tier 2. Tier 2 covered AT&T 1 members whose non-SSN data was exposed. Tier 3 covered AT&T 2 account owners.8Telecom Data Settlement. AT&T Data Incident Settlement
People in both classes could file separately against each fund, with a combined ceiling of $7,500, as long as the documentation supporting each claim was unique.8Telecom Data Settlement. AT&T Data Incident Settlement
Actual per-person payments are not yet known. Final amounts depend on the total number of valid claims and what remains in each fund after administrative costs, attorney fees, and service awards are deducted. Plaintiffs’ attorneys requested about $59 million in fees, roughly a third of the total settlement, and the court deferred the final ruling on that request to the final approval hearing.7New Haven Register. AT&T Data Breach Settlement Attorney Fees
Where the Settlement Stands
The consolidated case, In Re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E, is before Judge Ada Brown in the Northern District of Texas.9U.S. District Court, Northern District of Texas. MDL 3:24-md-03114 Judge Brown granted preliminary approval on June 20, 2025, finding the deal appeared to be “fair, reasonable, and adequate.”10U.S. District Court, Northern District of Texas. Preliminary Approval Order, MDL 3114
Key deadlines have already passed. The opt-out and objection deadline was November 17, 2025. The claim filing deadline was December 18, 2025. Roughly 4.38 million claims had been submitted by December 30, 2025.7New Haven Register. AT&T Data Breach Settlement Attorney Fees
A six-hour final approval hearing was held on January 15, 2026, covering the settlement classes, the opt-out procedures, and the fee request.7New Haven Register. AT&T Data Breach Settlement Attorney Fees As of April 2026, Judge Brown had not issued a final ruling. Kroll continues to review and process claims in the meantime.
When Payments Will Go Out
No payments can be distributed until the court grants final approval and any appeal period expires. The settlement website warns that appeals from a final approval order could further delay resolution.8Telecom Data Settlement. AT&T Data Incident Settlement
If you filed a claim, watch for correspondence from Kroll about whether your claim was accepted and, later, about the amount and method of payment. If your address, email, or banking information changes, update it with the administrator so a check or electronic payment does not go astray.
If you missed the December 18, 2025, claim deadline, the settlement does not provide a mechanism for late filings, and this article does not identify one. The claim deadline and the opt-out deadline have both passed, which also means class members who did not opt out will be bound by the final judgment and release once approved.
For status updates, class members can check the settlement website or call the administrator at (833) 890-4930.8Telecom Data Settlement. AT&T Data Incident Settlement
What This Settlement Does Not Cover
The $177 million deal resolves claims by AT&T customers against AT&T over the two 2024 breaches. It is not the same as separate FCC actions against AT&T, including a $13 million consent decree in September 2024 over a January 2023 vendor cloud breach affecting nearly 8.9 million AT&T Mobility customers, and a fine of more than $57 million imposed in April 2024 over the handling of customer location data.11FCC. In the Matter of AT&T Services Inc., Consent Decree12FCC. FCC Fines AT&T $57M for Location Data Violations Those are regulatory penalties paid to the government, not funds that go to individual customers.
The Texas settlement is also distinct from litigation against Snowflake itself, which has been consolidated as MDL No. 3126 before Judge Brian Morris in the District of Montana.13JPML. MDL-3126 Transfer Order Filing a claim in the AT&T settlement does not involve the Snowflake MDL, and any recovery from Snowflake would come through a separate proceeding.