Kroll Telecom Data Settlement: AT&T $177M for Two 2024 Breaches

The AT&T data breach settlement administered by Kroll is a $177 million class action resolving claims over two 2024 data incidents, and as of mid-2026 it is awaiting a final approval ruling from U.S. District Judge Ada E. Brown after a January 15, 2026 hearing. Kroll Settlement Administration LLC is the court-appointed administrator processing the roughly 4.38 million claims filed by the December 18, 2025 deadline. No payments have gone out yet, and none will until the judge signs off and any appeals are resolved.¹²

The formal case is In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3114, consolidated in the Northern District of Texas. It covers roughly 100 million current and former AT&T customers.³

The Two Breaches Covered

The settlement resolves claims from two separate incidents AT&T disclosed in 2024. Which one affected you determines which class you belong to and what you could claim.

March 2024 Dark Web Leak

On March 30, 2024, AT&T confirmed that a dataset of customer records had surfaced on the dark web. The data appeared to date from 2019 or earlier and affected about 73 million people: 7.6 million current customers and 65.4 million former account holders. Exposed information varied by person but included names, mailing addresses, phone numbers, email addresses, dates of birth, Social Security numbers, AT&T account numbers, and account passcodes.⁴

July 2024 Snowflake Breach

On July 12, 2024, AT&T disclosed a second incident. Hackers had accessed an AT&T workspace on a third-party cloud platform hosted by Snowflake, Inc. between April 14 and April 25, 2024. The stolen data consisted of call and text metadata: phone numbers customers interacted with, the number and duration of those interactions, and, for a small subset of users, cell-site identification numbers indicating approximate location. It did not include the content of calls or texts, Social Security numbers, or financial information. The breach affected “nearly all” AT&T wireless customers, plus customers of mobile virtual network operators on AT&T’s network and some landline customers, with records covering call activity from May 1 through October 31, 2022 and a limited number from January 2, 2023.⁵¹

AT&T denied responsibility for either incident. In a court filing supporting the settlement, the company said it “agreed to this settlement to avoid the expense and uncertainty of protracted litigation.”⁶

Who Qualified and What Payments Were Offered

The $177 million total is split into two non-reversionary all-cash funds: $149 million for the March 2024 dark web leak and $28 million for the July 2024 Snowflake breach. Class members had to choose one payment path per class, not both.⁷

AT&T 1 Class (March 2024 Breach)

This class covers U.S. residents whose personal data appeared in the dark web dataset. Members had two options:

A documented loss payment of up to $5,000 for financial losses incurred in 2019 or later that could be traced to the breach, with supporting documentation.
A tier cash payment: a pro rata share of the $149 million net fund. Tier 1 members, whose Social Security numbers were exposed, receive five times the payout of Tier 2 members, whose other data was exposed but not their Social Security number. The per-person amount depends on the number of valid claims.

AT&T 2 Class (July 2024 Breach)

This class covers AT&T account owners, line users, and end users, including customers of mobile virtual network operators on AT&T’s network, whose call and text metadata was involved. Options:

A documented loss payment of up to $2,500 for losses on or after April 14, 2024.
A Tier 3 pro rata share of the $28 million net fund, available to account owners.

People affected by both breaches, designated overlap class members, could submit claims to both classes for a theoretical maximum of $7,500, though documented losses had to be unique to each incident.¹⁶

Actual payouts will run lower than the fund totals suggest because attorneys’ fees come out first. Plaintiffs’ counsel requested roughly $59 million: $49.67 million from the $149 million fund and $9.33 million from the $28 million fund, plus costs. Judge Brown has not yet ruled on the fee request.⁸

Kroll’s Role and the Claims Numbers

Kroll Settlement Administration LLC was appointed by the court to run the entire claims process. Its responsibilities include sending notices to eligible class members, operating the settlement website at telecomdatasettlement.com, running a toll-free helpline at (833) 890-4930, and reviewing and processing claim forms submitted online or by mail.⁹¹⁰

Kroll sent notices to approximately 99.7 million class members: about 57 million from the March 2024 breach, 36.4 million from the July 2024 breach, and 6.2 million affected by both.²

As of December 30, 2025, approximately 4.38 million people had submitted claims, a 4.8% claims rate. Plaintiffs’ attorneys said that rate exceeded most data breach class actions Kroll has administered. The settlement website continued to accept late claim forms after the deadline, though the file notes those are not guaranteed to be honored.²

Where the Settlement Stands Now

Judge Brown granted preliminary approval on June 20, 2025, calling the deal “fair and reasonable,” and certified the classes for settlement purposes.¹¹

A six-hour final approval hearing took place on January 15, 2026. It addressed the fairness of the settlement, the opt-out policy, and the fee requests. As of mid-2026, Judge Brown has not issued a final ruling, and no timeline has been announced.⁸

Even after final approval, payments will not begin until any appeals are resolved and Kroll finishes claims review. All deadlines have now passed: the claim filing deadline was December 18, 2025, and the opt-out and objection deadlines were both November 17, 2025.¹

If You Already Filed a Claim

Kroll is currently reviewing submitted claims. If you filed by the deadline, you don’t need to do anything else right now. Watch for direct communication from Kroll, and use the settlement website or the (833) 890-4930 helpline to check the status of a claim or update contact information so a payment can reach you when distribution eventually begins.⁹

1
Telecom Data Settlement. AT&T Data Incident Settlement
2
Connecticut Post. AT&T Data Breach Settlement Claims Filed
3
CourtListener. In Re AT&T Inc. Customer Data Security Breach Litigation
4
AT&T. Addressing Data Set Released on Dark Web
5
Panorays. AT&T Data Breach — What Happened
6
Time. AT&T Data Breach Settlement — How to File a Claim
7
Wolters Kluwer. AT&T Settlement Agreement
8
New Haven Register. AT&T Data Breach Settlement Attorney Fees
9
CBS News. AT&T Data Breach Settlement — How to File Claim
10
U.S. District Court, Northern District of Texas. Settlement Administration Notice
11
Reuters. $177 Million AT&T Data Breach Settlement Wins U.S. Court Approval