The Kroll settlement for AT&T is the $177 million class action payout that Kroll Settlement Administration LLC was appointed to manage after two AT&T data breaches disclosed in 2024. A federal judge in the Northern District of Texas granted preliminary approval in June 2025, the claims deadline closed on December 18, 2025, and a final approval hearing was held on January 15, 2026. As of mid-2026, the court has not issued a final order, so no payments have been distributed yet.
Why There Are Two Breaches and Two Pools
The settlement resolves consolidated litigation over two separate incidents, and the money is split accordingly. Of the $177 million fund, $149 million is allocated to the first breach and $28 million to the second.1ABC7 News. AT&T Data Breach $177 Million Settlement: How Consumers Can Claim Money
The first breach, disclosed in March 2024, exposed data from 2019 or earlier belonging to roughly 7.6 million current and 65.4 million former account holders. The exposed information included Social Security numbers, names, addresses, email addresses, dates of birth, and account passcodes.2ABC7 News. AT&T Data Breach $177 Million Settlement: How Consumers Can Claim Money
The second breach, disclosed on July 12, 2024, involved call and text metadata for nearly all AT&T wireless customers, approximately 109 to 110 million people. Hackers used stolen credentials to pull records from AT&T’s workspace on the Snowflake cloud platform.3Security.org. AT&T Data Breach The stolen records covered activity between May 1 and October 31, 2022, with a small number extending to January 2, 2023. They included the phone numbers customers contacted, call durations, and in some cases cell tower identifiers, but not call content, Social Security numbers, or customer names.4PBS NewsHour. AT&T Says Data of Nearly All Customers Downloaded in a Security Breach
The lawsuits were consolidated as In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E, before Judge Ada E. Brown. AT&T agreed to the $177 million payment while denying wrongdoing, citing the cost and uncertainty of continued litigation.5TIME. AT&T Data Breach Settlement: How to File a Claim
Who Qualifies for a Payment
The settlement recognizes two classes, and a person can belong to one or both.
The AT&T 1 class covers living U.S. residents whose personal data elements were part of the first breach announced on March 30, 2024. The relevant data includes combinations of names, addresses, phone numbers, email addresses, dates of birth, account passcodes, billing account numbers, and Social Security numbers.6NBC Chicago. Deadline Nears for AT&T Data Settlement Breach With Payouts up to $7,500
The AT&T 2 class covers AT&T account owners and line or end users whose phone numbers and call/text metadata were involved in the second breach, plus people whose phone numbers interacted with those customers during the covered period.5TIME. AT&T Data Breach Settlement: How to File a Claim Both classes exclude AT&T itself, its officers and subsidiaries, the presiding judge, and anyone who opted out or previously released claims.7Business CCH. AT&T Data Incident Settlement Agreement
What Claimants Could Receive
Class members had to pick between a documented-loss claim and a tiered pro rata payment from the relevant fund.
- Documented losses tied to the first breach, occurring in 2019 or later, were capped at $5,000 per person with supporting proof.
- Documented losses tied to the second breach, occurring on or after April 14, 2024, were capped at $2,500 per person.
- Tier 1 pays a pro rata share of the AT&T 1 net fund to members whose Social Security numbers were exposed, at five times the value of a Tier 2 payment.
- Tier 2 pays a pro rata share of the AT&T 1 net fund to members whose exposed data did not include a Social Security number.
- Tier 3 pays a pro rata share of the AT&T 2 net fund to account owners affected by the second breach.
People affected by both breaches could file under both funds, putting the theoretical documented-loss maximum at $7,500.5TIME. AT&T Data Breach Settlement: How to File a Claim Actual payouts depend on how many valid claims come in and what remains after administrative costs and attorney fees.8Telecom Data Settlement. AT&T Data Incident Settlement Plaintiffs’ counsel requested a combined $59 million in fees, roughly a third of the fund.9Greenwich Time. AT&T Data Breach Settlement Attorney Fees
The Claims Deadline Has Passed
The deadline to submit a claim, either online through the settlement website or by mailing a paper form to Kroll, was December 18, 2025. The opt-out and objection deadlines fell earlier, in the fall of 2025. To file, claimants needed a class member ID, email address, AT&T account number, or full name, along with supporting documentation for any claimed losses.10NBC Connecticut. AT&T Data Breach Settlement Deadline December 18 Late claims are not being accepted, and Kroll is reviewing and processing the submissions it received.8Telecom Data Settlement. AT&T Data Incident Settlement
Current Status and When Payments Could Arrive
Judge Brown held the final approval hearing on January 15, 2026. Plaintiffs’ counsel, AT&T’s counsel, several objectors, and two court-appointed Special Masters testified. The transcript was filed in February 2026, and additional objection-related filings have continued to appear on the docket.11CourtListener. In Re AT&T Inc. Customer Data Security Breach Litigation Docket
As of June 2026, no final order approving or denying the settlement has been issued. No payments will be distributed until the court grants final approval and any appeal periods expire.8Telecom Data Settlement. AT&T Data Incident Settlement If a claim was submitted, the next step is waiting for the court’s ruling and then for Kroll to calculate and issue pro rata payments from the net funds.
How to Contact Kroll and Verify That an Email Is Real
Kroll built and maintains the official settlement website at telecomdatasettlement.com, operates a toll-free support line at (833) 890-4930, and receives mail at a dedicated P.O. Box in New York.12U.S. District Court, Northern District of Texas. MDL 3114 Case Document Notice emails came from attsettlement@e.emailksa.com.13Telecom Data Settlement. AT&T Data Incident Settlement FAQ Some recipients suspected phishing, but reporting confirmed the messages were legitimate communications from the court-approved administrator.14Delaware Online. Check Eligibility for AT&T Data Breach Settlement If a claim was filed and the status is unclear, the support line is the direct route to Kroll. Kroll reports having managed more than 4,000 settlements and distributed over $30 billion across its history.15Kroll. Settlement Administration
What This Settlement Does Not Cover
The $177 million class action is separate from federal regulatory action. In September 2024, the FCC’s Enforcement Bureau reached a $13 million settlement with AT&T over a January 2023 vendor cloud breach affecting nearly 8.9 million AT&T Mobility customers, a different incident from either of the two covered by the class settlement.16FCC. In the Matter of AT&T Services Inc., Consent Decree That FCC money went to the government, not to consumers. Being affected only by the 2023 vendor incident does not create eligibility for a payment under the Kroll-administered settlement.