Yes, the AT&T settlement is legitimate. It’s a $177 million class action settlement resolving two data breaches AT&T disclosed in 2024, pending before Judge Ada E. Brown in the U.S. District Court for the Northern District of Texas, and administered by Kroll Settlement Administration through the official site telecomdatasettlement.com. Whether you’re looking at an email, a postcard, or a phone call about it, the way to tell the real thing from a scam is to check it against the court-approved contact points and process below.
How to Confirm You’re Dealing With the Real Settlement
There is one authorized settlement website: telecomdatasettlement.com. It is controlled by Kroll Settlement Administration LLC, the court-approved administrator, and supervised by counsel on both sides. Kroll has administered more than 4,000 settlements and distributed over $30 billion in funds, and holds ISO 27001 and SOC2 Type II certifications.
Official contact points for this case:
- Email notifications come from the domain attsettlement@e.emailksa.com.
- The toll-free number is (833) 890-4930.
- The mailing address is AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324.
If a notice, email, or call points you somewhere else, treat it as suspect. You can also confirm the case exists in public court records by searching for its formal name, In re AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E.
Red Flags That Signal a Scam
The Better Business Bureau’s general guidance on settlement scams applies squarely here. A few tests:
- Filing a legitimate class action claim is always free. No real settlement asks you to pay a fee to participate.
- A real notice will not ask for your bank account information, Social Security number, or driver’s license number just to join the class.
- Vagueness about the case name, the defendant, or how to file is a warning sign. Real notices identify the case and the court.
- Guaranteed large upfront payouts are not how class settlements work. Amounts depend on claim volume and deductions, and administrators do not advertise fixed windfalls.
When something feels off, search independently for the defendant and the case name and verify against the official site above rather than clicking links in the message you received.
What the Settlement Actually Covers
The case consolidates claims from two separate incidents AT&T disclosed in 2024. Knowing which one applies to you helps you judge whether a notice matches your situation.
The March 2024 Breach
On March 30, 2024, AT&T confirmed that a data set containing personal information on roughly 73 million people had appeared on the dark web: 7.6 million current account holders and 65.4 million former customers. The exposed fields included names, email addresses, mailing addresses, phone numbers, dates of birth, Social Security numbers, AT&T account numbers, and account passcodes. AT&T said the data appeared to date from 2019 or earlier.
The July 2024 Snowflake Breach
AT&T disclosed a second incident on July 12, 2024. Between April 14 and April 25, 2024, hackers used stolen credentials to access an AT&T workspace on the cloud platform Snowflake, on accounts that lacked multi-factor authentication. The stolen data was call and text metadata (phone numbers interacted with, interaction counts, call durations, and some cell-site identifiers) for nearly all AT&T wireless customers during May 1 through October 31, 2022, plus a small subset from January 2, 2023. Call and text content was not included. About 110 million wireless customers were affected.
Who Qualifies
Eligibility comes from AT&T’s own records, not from self-identification. For the March 2024 breach, the class includes living U.S. residents whose personal information appeared in the compromised data set. For the Snowflake breach, the class includes AT&T account owners and line users whose phone numbers, interaction records, or cell-site data were involved. Some people fall into both classes; AT&T flagged those overlaps when it provided class lists to Kroll for notice. Account owners in the Snowflake class could submit claims for themselves and their associated line users.
What You Can Actually Receive
The $177 million fund is non-reversionary, meaning nothing goes back to AT&T. It is split into two pools:
- $149 million (AT&T 1 Fund): March 2024 breach claims. Tier 1 (Social Security number exposed) receives higher pro-rata payments; Tier 2 (other data exposed, no SSN) receives lower pro-rata payments. Documented financial losses traceable to the breach are compensable up to $5,000.
- $28 million (AT&T 2 Fund): Snowflake breach claims. Tier 3 members receive a pro-rata share of what remains after costs. Documented losses traceable to this incident are compensable up to $2,500.
Someone affected by both breaches can claim from both funds, for a combined maximum of $7,500. Plaintiffs’ attorneys acknowledged at the final approval hearing that actual payouts will likely fall well below those maximums, because per-person amounts depend on how many valid claims come in and what is deducted for administrative costs and attorney fees. Class counsel has requested $59 million in fees, roughly one-third of the fund, and the court has not yet ruled on that request.
Where the Case Stands Now
The claim filing deadline was December 18, 2025, and it has passed. Kroll is reviewing submitted claims. Judge Brown held the final approval hearing on January 15, 2026, but as of April 2026 had not issued a ruling. The settlement website states that the court “continues to consider whether it will approve the Settlement” and that there is no timeline for the decision. If final approval is granted, payments will not go out until any appeals are resolved and claims review is complete.
Because the filing window is closed, any message inviting you to file a new claim now, promising a guaranteed amount, or asking for a fee should be treated as a scam. If you already filed, check telecomdatasettlement.com for status updates or call the administrator at (833) 890-4930.
Don’t Confuse This With the FTC Throttling Refunds
A separate AT&T matter sometimes gets mixed up with this one. The Federal Trade Commission’s enforcement action over data throttling on unlimited plans resulted in $60 million in relief in 2019, with an additional $6.3 million in refunds sent to former customers in April 2024. That case involved allegations of slowed data speeds, not data security breaches, and it is not part of the $177 million settlement.