AT&T customers affected by two major data breaches in 2024 are moving closer to receiving compensation under a $177 million class-action settlement. A federal court granted final approval of the agreement on October 2, 2026. However, eligible claimants should not assume that payments have already been issued or that everyone will receive $5,000.
The settlement covers two separate incidents involving customer information. The first involved personal information that appeared in a dataset on the dark web. The second involved call and text records obtained from an AT&T workspace hosted on a third-party cloud platform.
The settlement provides compensation for eligible people who submitted valid claims before the deadline. Payments may be issued electronically or by paper check, depending on the applicable procedures and payment arrangements.
Here is what customers need to know about the AT&T data breach settlement, possible compensation, payment timing, and how to check an existing claim.
AT&T Data Breach Settlement: Latest Update
The U.S. District Court for the Northern District of Texas granted final approval of the $177 million settlement on October 2, 2026. The agreement resolves litigation involving the two 2024 data incidents without an admission of liability or wrongdoing by AT&T.
The settlement divides the money between two groups.
- AT&T 1 settlement: $149 million allocated to claims involving the first data incident.
- AT&T 2 settlement: $28 million allocated to claims involving the second data incident.
The court’s approval is an important step toward compensation. However, distribution depends on the settlement’s effective date, the status of any appeals, and the processing of claims.
The official settlement website lists December 18, 2025, as the deadline for submitting a claim. That deadline has passed, so people who did not file a timely claim should not assume they can join the settlement now.
When Will AT&T Settlement Payments Arrive?
Eligible claimants may receive their AT&T settlement payments in the coming months. However, an exact payment date for every claimant has not been confirmed.
Under the settlement terms, distribution is tied to the agreement’s effective date. The agreement provides for payments within 60 days of that date, subject to the applicable settlement procedures.
The effective date depends on the appeal period following final approval. If an appeal is filed, the timeline may change.
Based on the current timeline, payments could begin in late 2026, while some recipients may have to wait until early 2027. These are estimates rather than guaranteed delivery dates.
Several factors can affect when an individual receives money:
- Whether the claimant submitted a valid claim.
- Whether the settlement administrator completed the eligibility review.
- Whether additional documents were requested.
- Whether an appeal delays the settlement’s effective date.
- Whether the payment is being processed electronically or by mail.
Important: Final court approval does not mean that every eligible person will receive a payment immediately. Claimants should use the official settlement website for verified updates.
How Much Money Could Eligible AT&T Customers Receive?
The settlement allows different forms of compensation depending on which data incident affected a person and whether they can prove qualifying financial losses.
The advertised maximum payments are not guaranteed amounts for every claimant.
1. Up to $5,000 for the First Data Incident
Eligible members of the AT&T 1 settlement class could claim up to $5,000 for documented losses connected to the first incident.
To qualify for this type of payment, claimants had to provide supporting evidence showing that their losses were reasonably traceable to the incident. Eligible losses generally had to occur in 2019 or later and satisfy the settlement’s other requirements.
Examples of potentially qualifying expenses include certain unreimbursed costs arising from identity theft, identity fraud, or misuse of personal information.
The maximum is a limit, not a flat payment. A claimant would not automatically receive $5,000 simply because their information was exposed.
2. Up to $2,500 for the Second Data Incident
Eligible members of the AT&T 2 settlement class could claim up to $2,500 for documented losses associated with the second incident.
The claimed losses had to occur on or after April 14, 2024, and be supported by appropriate documentation linking them to the incident.
The settlement also provides an alternative tiered payment for certain eligible account owners. These payments are calculated from the applicable settlement fund after specified expenses and other approved amounts are deducted.
3. Tiered Cash Payments
Some eligible claimants selected a tiered cash payment rather than reimbursement for documented losses.
The amount of a tiered payment depends on the relevant settlement class, the available net settlement fund, and the number of valid claims.
For the first incident, eligibility for Tier 1 or Tier 2 depends on the type of information included in the exposed data. People whose Social Security numbers were involved fall into Tier 1, while eligible people whose exposed information did not include their Social Security numbers fall into Tier 2. The settlement specifies that a Tier 1 payment is five times a Tier 2 payment.
For the second incident, eligible account owners could choose a Tier 3 payment as an alternative to a documented-loss payment. Line and end users who are not account owners are subject to different payment rules.
Actual payments may be substantially lower than the maximum documented-loss amounts. The $177 million total also includes two separate settlement funds and is not a promise that every claimant will receive the same amount.
What Happened in the Two AT&T Data Breaches?
Understanding the incidents helps explain why the settlement covers two different groups.
First incident: Personal information appeared on the dark web
On March 30, 2024, AT&T announced that a dataset containing AT&T-specific information had appeared on the dark web.
Court documents describe allegations that a third party compromised systems in or around 2019 and that the dataset appeared on the dark web before AT&T announced the incident. The information varied by individual and could include names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers, and Social Security numbers.
Reports about the incident cited approximately 7.6 million current customers and 65.4 million former customers as affected.
The information exposed was not identical for every person. Therefore, being a current or former AT&T customer alone does not establish eligibility for a settlement payment.
Second incident: Call and text records were accessed
AT&T announced a separate data incident on July 12, 2024. According to court documents, certain records were illegally downloaded from an AT&T workspace hosted on Snowflake, a third-party cloud platform.
The records involved call and text interactions from May through October 2022, along with a smaller amount of data from January 2023.
The information included telephone numbers that interacted with AT&T customers’ numbers, counts of those interactions, and aggregate call durations. A small subset of records also included cell-site identification numbers.
The records did not contain the actual contents of calls or text messages, according to information reported about the incident. Nevertheless, call records can reveal sensitive details about communication patterns.
These incidents formed the basis of separate lawsuits that were later resolved through the combined settlement.
Who Was Eligible for the AT&T Settlement?
The settlement established two main eligibility groups.
AT&T 1 settlement class: People in the United States whose qualifying personal information was included in the first data incident announced on March 30, 2024.
AT&T 2 settlement class: AT&T account owners and qualifying line or end users whose data was involved in the second incident announced on July 12, 2024.
Some people may have qualified under both groups if their information was involved in both incidents.
However, settlement membership and payment eligibility are not the same thing. Receiving compensation generally required a valid claim submitted by the deadline, along with any additional information required by the settlement administrator.
The settlement website provides the detailed class definitions and eligibility rules.
Can You Still File a New AT&T Settlement Claim?
The standard deadline to submit a claim was December 18, 2025. That deadline has passed.
The settlement administrator also set September 8, 2026, as the deadline for responding to certain notices requesting additional information or verification. That deadline has passed as well.
If you already filed a claim, you can still check its status and review any communications you received from the settlement administrator. If your claim required additional documents, the outcome may depend on whether you provided the requested information within the applicable deadline.
If you never filed a claim, do not assume that the settlement website’s claim links mean a new claim is available. Contact the administrator to ask about your specific circumstances.
You can visit the official website here:
AT&T Data Incident Settlement — Official Website
The administrator’s listed toll-free number is 833-890-4930.
Use the official website or contact details to verify information. Be cautious of unsolicited messages promising guaranteed checks or requesting sensitive personal or banking information.
How to Check an Existing AT&T Settlement Claim
People who submitted claims can take the following steps to look for updates.
- Visit the official AT&T Data Incident Settlement website.
- Review the settlement notices and frequently asked questions.
- Look for any emails or letters from the settlement administrator, Kroll Settlement Administration.
- If you received a claim identification number, keep it available when contacting the administrator.
- Ask the administrator whether your claim has been approved, whether more information is needed, and whether a payment has been scheduled.
The official settlement website also provides a feature for requesting a replacement or resend of a class member ID.
Do not share your claim details publicly on social media. If you receive a message asking for a fee to release your settlement money, verify the request through the official administrator before taking any action.
What Should Customers Do to Protect Their Information?
The settlement addresses claims related to the two incidents, but customers should continue taking reasonable steps to protect their accounts and personal information.
Here are some practical precautions:
- Change passwords that may have been exposed or reused across multiple services.
- Use unique passwords for important accounts and enable multifactor authentication where available.
- Review bank and credit card statements for unfamiliar transactions.
- Monitor credit reports for accounts or inquiries you do not recognize.
- Consider a credit freeze with the major U.S. credit bureaus if you are concerned that your Social Security number may have been exposed.
- Be alert to phishing emails, suspicious calls, and messages that use personal details to appear legitimate.
These steps can help reduce the risk of identity theft. They do not guarantee that misuse will never occur, and they are separate from the settlement payment process.
Frequently Asked Questions
Is the AT&T $177 million settlement approved?
Yes. The U.S. District Court for the Northern District of Texas granted final approval on October 2, 2026. Payment distribution remains subject to the settlement’s effective-date requirements and applicable processing procedures.
Will every AT&T customer receive $5,000?
No. The $5,000 amount is the maximum documented-loss payment available to eligible members of the first settlement class. It is not a guaranteed payment for all AT&T customers or everyone whose data may have been exposed.
When could AT&T settlement checks arrive?
Payments could begin in late 2026, with some potentially arriving in early 2027. The exact timing depends on the settlement’s effective date, any appeals, and the completion of claims processing.
Can I apply for the settlement in October 2026?
The standard claim deadline was December 18, 2025. The deadline for responding to certain deficient-claim notices was September 8, 2026. Both dates have passed. Contact the settlement administrator if you need clarification about an existing claim or your eligibility.
Does the settlement cover both 2024 data incidents?
Yes. The combined settlement covers the first incident announced in March 2024 and the second incident announced in July 2024. Eligibility and payment options differ between the two settlement classes.
Where can I find official payment updates?
Visit telecomdatasettlement.com or call the settlement administrator at 833-890-4930.
