Is the AT&T Settlement Real? Payouts, Scam Notices, and FTC Refund

Yes, the AT&T settlement is real. A federal judge in Dallas gave preliminary approval in June 2025 to a $177 million class action resolving claims from two 2024 data breaches that exposed personal information belonging to tens of millions of AT&T customers.1Reuters. $177 Million AT&T Data Breach Settlement Wins US Court Approval The claim filing window closed on December 18, 2025, and as of mid-2026 the court has not issued a final approval ruling, so no money has been paid out yet.2Telecom Data Settlement. In Re AT&T Inc. Customer Data Security Breach Litigation

What the Settlement Covers

Two separate incidents are rolled into the one settlement.

The first, disclosed on March 30, 2024, involved an AT&T dataset that surfaced on the dark web. The exposed fields included names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, account passcodes, and billing account numbers. AT&T put the count at roughly 7.6 million current customers and 65.4 million former account holders, with the data appearing to date from 2019 or earlier.3AT&T. Addressing Data Set Released on Dark Web

The second, disclosed on July 12, 2024, was a theft of records from an AT&T workspace on the Snowflake cloud platform. The stolen records covered telephone numbers, interaction counts, aggregate call durations, and, for a smaller group, cell site identification numbers that can approximate location. The data ran from 2022 into early 2023 and reached nearly all of AT&T’s wireless customers, reported at around 110 million people.2Telecom Data Settlement. In Re AT&T Inc. Customer Data Security Breach Litigation4KrebsOnSecurity. Canadian Man Arrested in Snowflake Data Extortions

AT&T agreed to pay without admitting wrongdoing.5NBC DFW. AT&T Settlement Money Deadline Date How to File Claim

How Much Claimants Could Receive

The $177 million sits in two non-reversionary funds, meaning unclaimed money does not revert to AT&T:6Business.CCH.com. AT&T Settlement Agreement

  • The AT&T 1 Fund holds $149 million for the March 2024 dark web breach. Claimants with documented financial losses traceable to the breach could seek up to $5,000. Those without documentation could claim a pro rata share through tiers: Tier 1, for people whose Social Security numbers were exposed, pays five times the amount of Tier 2, for people whose other data was exposed but not their SSN.
  • The AT&T 2 Fund holds $28 million for the July 2024 Snowflake breach. Documented losses could be claimed up to $2,500. Account owners without documentation could claim a Tier 3 pro rata payment.

Customers hit by both breaches, called “overlap settlement class members,” could file against both funds for a combined cap of $7,500, provided the documentation for each claim was distinct.2Telecom Data Settlement. In Re AT&T Inc. Customer Data Security Breach Litigation

What any individual actually receives is still unknown. The tiered payments are pro rata shares of whatever is left in each fund after attorneys’ fees, administration costs, and service awards are deducted. Plaintiffs’ lawyers requested $59 million, roughly a third of the total, with about $49.67 million attributed to the Lanier Law Firm and $9.33 million to Kopelowitz Ostrow Ferguson Weiselberg Gilbert.7New Haven Register. AT&T Data Breach Settlement Attorney Fees One report put the number of submitted claims at approximately 4.38 million.8Bright Defense. AT&T Data Breach For a rough sense of scale, splitting the full $149 million AT&T 1 fund evenly across that many claimants, with no deductions, would land around $34 per person; after fees and costs the actual pro rata figure will be lower. Claimants with documented losses stand to receive considerably more than the base pro rata share.

Where Things Stand

Judge Ada E. Brown granted preliminary approval on June 20, 2025, finding the settlement “fair, reasonable, and adequate.”9U.S. District Court for the Northern District of Texas. Preliminary Approval Order The original November 18, 2025 claim deadline was extended one month, to December 18, 2025.10ABC10. AT&T Data Breach Settlement Deadline How to File a Claim The final approval hearing was held on January 15, 2026. As of mid-2026 the court has not ruled, and Kroll Settlement Administration is still reviewing claims. No payments will go out until final approval is entered and any appeals are resolved.11U.S. District Court for the Northern District of Texas. MDL 3:24-md-03114

If you missed the December 18, 2025 deadline, the file does not indicate any further extension.

How to Tell a Real Settlement Notice From a Scam

The settlement’s size and reach have drawn scammers. Fake settlement sites and phishing emails have been built to collect Social Security numbers and banking details from people who think they are filing a real claim, with some fraudsters using AI tools to produce convincing clones of legitimate claim portals.12Fox News. Don’t Fall for Fake Settlement Sites That Steal Your Data

A few verification points from the file:

  • The only official settlement website is telecomdatasettlement.com.
  • Legitimate notification emails come from attsettlement@e.emailksa.com.
  • The court-appointed administrator is Kroll Settlement Administration, reachable at (833) 890-4930.13CBS News. AT&T Data Breach Settlement Kroll How to File Claim

Snopes confirmed in August 2025 that emails from Kroll about this settlement are authentic and rated the settlement itself “True.”14Snopes. AT&T Customers Could Get Up to $7,500 From Data Breach Settlement

Not the Same as the FTC Throttling Refund

This case is distinct from an older FTC action over data throttling, in which the FTC alleged AT&T slowed unlimited-plan customers after they hit a usage threshold. AT&T settled that matter for $60 million in 2019, and the FTC distributed a final round of nearly $6.3 million in refunds to former customers in April 2024.15Federal Trade Commission. FTC Sends Refunds to Former AT&T Wireless Customers Who Were Subject to Data Throttling Different claims, different administrator (JND Legal Administration), and no connection to the data breach payouts.