AT&T 2024 Data Breach Settlement: Latest Update

The AT&T 2024 data breach settlement has become an important topic for current and former AT&T customers who want to know whether their personal information was exposed, whether they qualify for compensation and when payments might arrive. After two separate data incidents were disclosed in March and July 2024, the lawsuits were consolidated into a class action that ended in a proposed $177 million settlement.

The latest major development came on October 2, 2026, when a federal court granted final approval of the settlement. The agreement covers claims from both data incidents and sets up different compensation options for eligible people. But final approval doesn’t mean every customer will automatically get a check, and it doesn’t guarantee that every claimant will receive the maximum advertised amount.

For people looking for the AT&T data breach settlement update, the most important details are the eligibility requirements, the December 18, 2025, claim deadline, the documented-loss compensation limits and the remaining steps in distributing payments.

This guide explains what happened, how the settlement works, what eligible customers could receive and what to do if you’ve already submitted a claim.

AT&T 2024 Data Breach Settlement: Latest News

The federal court overseeing the consolidated litigation approved the $177 million class action settlement on October 2, 2026. The settlement resolves lawsuits stemming from two separate incidents involving AT&T customer information.

The official settlement website identifies two groups of potentially eligible claimants:

• AT&T 1 settlement class: U.S. residents whose personal information appeared in the data incident announced on March 30, 2024.
• AT&T 2 settlement class: AT&T account owners, line users or end users whose covered information was involved in the incident announced on July 12, 2024.

The agreement sets up different payment options depending on the incident, the information involved and whether a claimant can document qualifying financial losses.

The deadline for submitting an original claim was December 18, 2025. That deadline has passed. The settlement administrator’s FAQ also names September 8, 2026, as the deadline for certain claimants who got notices asking for more documentation or verification. That date has passed too. Anyone who received such a notice should check with the official settlement administrator about the status of their particular claim.

Key Facts at a Glance

The figures above describe the settlement framework and aren’t a promise that each eligible person will receive a particular amount. Actual benefits depend on valid claims, applicable settlement rules, documented losses and the distribution process.

What Is the AT&T Data Breach Settlement?

The AT&T data breach settlement is a class action agreement meant to resolve lawsuits arising from two security incidents involving customer information.

After the incidents were disclosed in 2024, customers and other affected people filed legal claims alleging that AT&T and related defendants hadn’t adequately protected sensitive information. The lawsuits were consolidated, and the parties eventually negotiated a settlement covering both groups of claims.

In March 2025, the parties reached an agreement to resolve the litigation. The settlement agreement was signed on May 30, 2025, and the court granted preliminary approval in June 2025. After the required notice process and a final approval hearing in January 2026, the court granted final approval on October 2, 2026.

The settlement provides a combined $177 million in cash funds:

• $149 million allocated to the AT&T 1 settlement class.
• $28 million allocated to the AT&T 2 settlement class.

These funds are meant to provide compensation under the agreement. Administrative expenses, court-approved attorneys’ fees and costs, service awards and other applicable deductions reduce the net amount available for class member payments.

It’s important to understand that a settlement isn’t the same as a court finding that every allegation against a company was proven. The parties resolved the litigation without any admission of liability or wrongdoing by the defendants.

For affected customers, the practical questions are whether their information was part of a covered incident and whether they completed the necessary claim steps before the applicable deadlines.

Understanding the Two AT&T Data Breaches in 2024

The settlement covers two distinct data incidents. Knowing the difference matters, because the information involved, the eligibility requirements and the compensation options vary between them.

1. The March 2024 AT&T Data Breach

On March 30, 2024, AT&T announced that a dataset containing AT&T-specific information had appeared on the dark web.

Court records describe allegations that the data had been compromised earlier and that the dataset showed up online before the company announced the incident in 2024. The information reportedly included different combinations of customer details, such as names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers and Social Security numbers. Not every affected person necessarily had every listed data element exposed.

The exposure of sensitive information can create risks that last long after an incident becomes public. For example, someone whose Social Security number or account passcode is exposed may face a higher risk of identity-related fraud or attempts to break into accounts. Details such as dates of birth and addresses can also help criminals make fraudulent messages look more convincing.

Still, the appearance of information in a breach dataset doesn’t automatically prove that every affected person suffered a financial loss or became a victim of identity theft. This distinction matters when deciding eligibility for documented-loss compensation. Claimants seeking reimbursement under the settlement had to provide appropriate evidence linking qualifying losses to the covered incident.

2. The July 2024 AT&T Data Breach

AT&T announced a second data incident on July 12, 2024. This incident involved information illegally downloaded from an AT&T workspace on a third-party cloud platform hosted by Snowflake.

According to the court’s description, the exposed information included telephone numbers belonging to current and former AT&T customers, telephone numbers those customers interacted with, counts of interactions and aggregate call durations for a day or month. For a small subset of people, the information also included cell site identification numbers tied to certain interactions.

The court records set this incident apart from the March 2024 data exposure.

The second incident’s covered data didn’t include the text content of messages, customer names, Social Security numbers, dates of birth or other personal identifying or financial information of the types specifically described by the court. That doesn’t mean call-related information is harmless. Telephone metadata can reveal patterns of communication and may raise privacy concerns even when message content isn’t included.

For settlement purposes, the July incident created a separate group of potentially eligible people and a different set of compensation rules.

Why the Difference Between the Breaches Matters

A customer might have been affected by one incident, the other or both. The applicable settlement class determines which compensation options may be available.

For the March incident, eligibility depends on whether the relevant personal information was included in the covered dataset. For the July incident, eligibility depends on whether the person’s covered AT&T account or line-user information was involved.

The two incidents also have different documented-loss payment limits. Someone eligible under both classes may have separate rights under each, but the same expense can’t simply be claimed twice. These differences explain why customers should rely on the official settlement documentation and not assume all AT&T customers get the same amount.

Who Is Eligible for the AT&T 2024 Data Breach Settlement?

Eligibility depends on the specific data incident and the information involved.

AT&T 1 Settlement Class

The AT&T 1 class generally covers living individuals in the United States whose covered personal information appeared in the dataset linked to the March 30, 2024, announcement.

Potentially covered information includes:

• Names and addresses.
• Telephone numbers and email addresses.
• Dates of birth.
• AT&T account passcodes.
• Billing account numbers.
• Social Security numbers.

The information exposed varied by person. So being part of the general population of AT&T customers doesn’t by itself establish eligibility. The relevant question is whether the person’s information was included in the incident covered by the settlement.

AT&T 2 Settlement Class

The AT&T 2 class generally covers AT&T account owners, line users or end users whose covered information was involved in the July 12, 2024, incident.

The information may include telephone numbers, numbers contacted, counts of interactions, aggregate call durations and certain cell site identification numbers for a small subset of people.

A person didn’t necessarily need to be a current AT&T subscriber when the incident was announced. The settlement’s eligibility definition also covers qualifying former customers and line or end users whose covered information was involved.

What If You Were Affected by Both Breaches?

Some people may qualify under both settlement classes. These individuals are called overlap settlement class members.

Being in both classes doesn’t mean the same financial loss can be reimbursed twice. The official settlement rules require separate supporting documentation for documented-loss claims tied to the two incidents.

Anyone unsure about their classification should consult the official settlement website or contact the administrator using the contact information published there.

How Much Money Can You Receive From the AT&T Settlement?

One of the most common questions about the AT&T 2024 data breach settlement is how much money an eligible customer can receive.

The settlement sets up two broad approaches to compensation: documented-loss payments and tiered cash payments.

The right option depends on the settlement class, the claimant’s circumstances and the terms governing the claim.

Documented-Loss Payments

Eligible members of the AT&T 1 class may claim up to $5,000 for qualifying documented losses.

Eligible members of the AT&T 2 class may claim up to $2,500 for qualifying documented losses.

These amounts are maximum limits and not guaranteed payouts. A claimant must meet the applicable eligibility requirements and provide adequate supporting documentation for losses fairly traceable to the relevant data incident. The amount ultimately awarded may be lower than the maximum claimed.

What Counts as a Documented Loss?

According to the settlement administrator’s FAQ, qualifying losses may include unreimbursed expenses tied to identity theft, identity fraud, falsified tax returns or other misuse of personal information connected to the incident.

Other potentially eligible expenses may include certain costs for postage, copying, mileage, notary services or long-distance telephone calls incurred in connection with a qualifying loss. Certain credit-monitoring or mitigation expenses may also qualify under the settlement rules.

The key requirement is that the loss must be eligible under the agreement and backed by appropriate evidence. Simply stating that an expense occurred may not be enough.

The administrator also names categories that aren’t eligible for compensation under the documented-loss provisions, including medical bills, emotional distress, estimated lost wages, estimated lost time, credit-score reductions, self-performed professional services and expenses that have already been reimbursed.

Tiered Cash Payments

Eligible class members who chose the applicable tiered payment option could receive a share of the net settlement fund without having to prove the same level of documented financial loss that a documented-loss claim requires.

The amount available to each claimant depends on the relevant class, the applicable tier, the number of valid claims and the deductions authorized under the settlement.

For the AT&T 1 class, the settlement distinguishes between:

• Tier 1: Generally applies to eligible individuals whose Social Security numbers were included in the covered dataset.
• Tier 2: Generally applies to eligible individuals whose covered information was included but whose Social Security numbers were not.

The agreement provides for a Tier 1 payment that is five times the Tier 2 payment.

The AT&T 2 class has its own tiered payment option for eligible account owners, subject to the settlement’s specific conditions. The administrator’s official documentation should be consulted for the rules that apply to each claim.

The key point is that documented-loss payments and tiered cash payments work differently. Eligible claimants couldn’t assume they’d receive both options for the same settlement class.

Estimated AT&T Settlement Payout Amounts

The court’s October 2026 approval order discusses estimated tiered payment amounts based on information provided during the approval process.

The estimates included:

These figures are estimates cited in the court’s discussion and not guaranteed payments. The order describes them as contingent on certain variables, and final amounts may depend on claim validation and the settlement’s distribution calculations.

This is an important distinction for readers searching for the AT&T settlement payout amount.

The headline figure of $177 million is the total settlement funds allocated across the two classes. It doesn’t mean every customer receives an equal slice of $177 million.

A person’s payment may depend on the relevant class and tier, the validity of their claim, applicable deductions and the final distribution process.

Likewise, the maximum documented-loss payments of $5,000 and $2,500 shouldn’t be read as standard checks issued to every eligible customer.

AT&T Data Breach Settlement Claim Deadline

The original deadline for submitting a claim was December 18, 2025.

The settlement website says claim forms had to be submitted or postmarked by that date. The deadline has passed, so people who didn’t submit a claim on time shouldn’t assume they can still file an ordinary new claim.

The settlement administrator’s FAQ also describes a September 8, 2026, deadline for certain claimants who were asked to provide additional information or documentation. That deadline has passed too.

If you already filed a claim, you should separate the original filing deadline from any later message about verifying eligibility, fixing a deficiency or substantiating losses.

A request from the administrator may call for a response specific to your claim. The official administrator is the best source for determining what, if anything, is still necessary.

If you never submitted a claim, contact the administrator to confirm whether any exception or procedural option applies to your circumstances. Don’t rely on social media posts promising the deadline has been reopened.

How to Check Your AT&T Settlement Claim Status

If you submitted a claim before the deadline, checking its status is the most useful next step.

Step 1: Visit the Official Settlement Website

Go to the court-authorized settlement website:

**

Step 2: Look for Claim-Related Notices

Check any correspondence you received after filing your claim. This may include a claim confirmation, a class member identification number, a request for more evidence or information about your eligibility.

Keep the correspondence so you can refer to the relevant details when contacting the administrator.

Step 3: Contact the Settlement Administrator

The official settlement website lists the administrator’s telephone number as (833) 890-4930.

You can ask whether your claim was received, whether any requested documentation is still outstanding and whether the administrator has information about the payment process.

Use the contact details published on the official website and not an unfamiliar number from an unsolicited message.

Step 4: Keep Your Records

Hold on to claim confirmations, administrator correspondence and copies of any supporting documentation.

If you receive a payment notification, compare it with the information on the official settlement website. Never give passwords, banking login credentials or one-time authentication codes to anyone claiming to help release your settlement payment.

When Will AT&T Data Breach Settlement Payments Arrive?

The court granted final approval on October 2, 2026, a significant step toward distribution.

But final approval doesn’t necessarily mean payments go out right away. The settlement’s distribution process involves claim review and the resolution of any remaining legal or administrative requirements.

The settlement website explains that benefits depend on court approval and the resolution of possible appeals. Court records also discuss the settlement’s estimated tiered payments, but those estimates don’t establish a guaranteed payment date for every claimant.

The practical next steps are to watch official settlement updates, respond to any legitimate outstanding request about an existing claim and keep your contact details current where the administrator offers an appropriate way to update them.

Be careful with websites or messages that promise an exact deposit date without citing official information. Payment timing may depend on the settlement’s effective date, the appeals process, claim processing and distribution arrangements.

A claim may also need further review before a payment amount can be finalized.

Why Did AT&T Agree to a $177 Million Settlement?

The lawsuits alleged that AT&T and related defendants failed to adequately protect customer information tied to the two incidents. The claims included allegations involving negligence, contractual duties, privacy-related legal requirements and other causes of action. The defendants agreed to resolve the litigation through a negotiated settlement and not continue fighting the claims through trial and possible appeals.

The settlement lets eligible class members seek compensation under defined rules while avoiding some of the uncertainty, expense and delay of continued litigation. The agreement shouldn’t be read as a judicial finding that all allegations were proven, however. The settlement resolves the covered claims without any admission of liability or wrongdoing by the defendants.

From a consumer perspective, the case shows the financial and reputational fallout that can follow large-scale data security incidents. It also demonstrates why organizations must carefully manage sensitive information across their own systems and third-party service providers.

When personal information is stored, transferred or processed by outside companies, security responsibilities can reach beyond a company’s primary network. The July incident shows why third-party cloud environments and vendor access controls matter in data protection.

How to Protect Yourself After an AT&T Data Breach

Even if you submitted a settlement claim, taking practical steps to protect your information remains important.

1. Monitor Your Credit Reports

Review your credit reports for accounts, inquiries or other activity you don’t recognize.

If you spot suspicious activity, look into it promptly through the relevant financial institution or credit-reporting agency.

2. Consider a Credit Freeze

A security freeze can limit access to your credit file and make it harder for someone to open certain new credit accounts in your name.

A freeze differs from a fraud alert, and its effects depend on the type of account and the applicable rules. Review the official instructions from the relevant credit-reporting agencies before deciding.

3. Change Vulnerable Passwords

If you reused an exposed password or account passcode elsewhere, change it on the affected accounts.

Use unique passwords for important services, especially email, banking, mobile accounts and financial apps. A reputable password manager can help you create and keep track of different passwords.

4. Enable Multifactor Authentication

Multifactor authentication adds another layer of protection beyond a password.

Where it’s available, turn it on for email accounts, financial services and other sensitive accounts. Review account recovery options to make sure they can’t be easily exploited.

5. Watch for Phishing Attempts

Criminals may use breach-related news to craft convincing messages about compensation, identity verification or urgent account security issues.

Don’t click unfamiliar links just because a message mentions AT&T or the settlement. Instead, go directly to the official website or contact the relevant organization through a trusted channel.

6. Review Your AT&T Account Security

If you’re an AT&T customer, review your account’s available security settings and recovery procedures.

Use strong authentication, monitor account activity and contact the company if you suspect unauthorized changes to your account.

7. Report Suspected Identity Theft

If someone uses your information fraudulently, contact the affected financial institution or service provider and follow its reporting procedures.

Keep copies of relevant statements, correspondence, receipts and fraud reports. These records may help you deal with the problem even when a particular expense isn’t covered by the settlement.

The goal is to lower the chance of additional harm and not rely solely on compensation after an incident.

How to Avoid AT&T Settlement Scams

The publicity around the AT&T 2024 data breach settlement can create openings for scammers.

Some fraudulent messages may claim a customer has been selected for a large payment. Others may promise to release a check if the recipient pays an administrative fee or shares sensitive information.

Watch for these warning signs:

• A message guarantees you’ll receive $5,000 without checking eligibility.
• Someone demands a processing fee to release settlement money.
• A caller asks for your password, banking login or one-time security code.
• A message sends you to an unfamiliar website that imitates an official settlement page.
• A sender threatens to cancel your payment right away unless you respond.
• An unsolicited message asks for unnecessary personal or financial information.

The official settlement website names Kroll Settlement Administration as the administrator and gives a telephone number for questions. If you get a questionable message, find the official website on your own and verify the information before responding.

Remember that a settlement notice doesn’t automatically mean your claim has been approved for a specific amount. The safest approach is to verify every important detail with the administrator and avoid paying money or giving sensitive credentials to an unverified party.

What the AT&T Settlement Means for Current and Former Customers

The settlement affects more than people who were actively using AT&T when the incidents became public. Former customers may also fall within the covered classes if their information was involved in one of the incidents. In addition, the July incident’s eligibility definition includes qualifying account owners and line or end users.

This matters because people sometimes assume that closing an account removes all risk tied to information a company previously held. In reality, personal information may stay in records for various operational, contractual or legal reasons. How that information is retained and protected is therefore an important part of a company’s broader data security responsibilities.

For consumers, the case is a reminder to keep records of previous service providers, monitor important accounts and review security alerts even after switching companies. For businesses, the incidents reinforce the importance of limiting access to sensitive information, evaluating third-party vendors, monitoring cloud environments and setting up clear procedures for spotting and responding to security incidents.

A settlement can’t undo an earlier exposure, but it can create a process for addressing certain claims and give financial relief to eligible people under the agreement.

Frequently Asked Questions About the AT&T 2024 Data Breach Settlement

1. Has the AT&T 2024 data breach settlement been approved?

Yes. The U.S. District Court for the Northern District of Texas granted final approval on October 2, 2026. But final approval doesn’t mean every claimant automatically receives a payment. Distribution is still subject to the settlement’s applicable requirements and procedures.

2. How much is the AT&T data breach settlement worth?

The combined settlement fund is $177 million, split into $149 million for the AT&T 1 settlement class and $28 million for the AT&T 2 settlement class. These are settlement fund totals and not individual payment amounts.

3. Can I receive $5,000 from the AT&T settlement?

Eligible members of the AT&T 1 class may claim up to $5,000 for qualifying documented losses. They must provide appropriate supporting evidence, and the maximum isn’t guaranteed. Eligible members of the AT&T 2 class may claim up to $2,500 under the matching documented-loss provisions.

4. What was the deadline to file an AT&T settlement claim?

The original claim deadline was December 18, 2025. That deadline has passed. Certain claimants who received requests for additional documentation faced a September 8, 2026, deadline, which has also passed. People with questions about an existing claim should contact the official administrator.

5. How do I check my AT&T settlement claim status?

Visit the official settlement website and use its published contact information. The settlement administrator’s listed telephone number is (833) 890-4930. Have your claim confirmation or class member identification details handy if you have them.

6. Will every AT&T customer receive settlement money?

No. Eligibility depends on whether a person’s covered information was involved in one or both incidents. In addition, the original claim deadline has passed, and people who didn’t submit a timely claim shouldn’t assume they qualify for a payment.

7. Can I receive compensation for both AT&T data breaches?

Some people may qualify under both settlement classes. The settlement has separate rules for each incident, though, and the same expense can’t be used twice to support documented-loss claims. Eligibility and benefits depend on the specific claims and supporting evidence.

8. Is the AT&T settlement payment automatic?

Not for everyone. The settlement says submitting a claim was the way to request settlement benefits. People who didn’t submit a claim by the deadline should contact the administrator if they have questions about their circumstances.

9. Is the AT&T data breach settlement email legitimate?

Some settlement emails are legitimate, but scammers may imitate official notices. The administrator names Kroll Settlement Administration as the organization responsible for settlement administration. Verify unexpected messages through the official settlement website or the administrator’s published telephone number before sharing information.

10. Where can I find official AT&T settlement updates?

The court-authorized settlement website is the primary source for official notices, eligibility information, claim procedures and administrator contact details.

Final Thoughts on the AT&T 2024 Data Breach Settlement

The AT&T 2024 data breach settlement is a significant resolution of lawsuits arising from two separate incidents involving customer information. With a combined settlement fund of $177 million and final court approval granted on October 2, 2026, the case has reached an important milestone.

For affected customers, the key considerations are whether they belonged to a covered settlement class, whether they submitted a claim before the December 18, 2025, deadline and whether they’ve responded to any legitimate requests about an existing claim.

The maximum documented-loss amounts of $5,000 and $2,500 are subject to eligibility requirements and supporting evidence. They shouldn’t be confused with guaranteed payments or with the smaller estimated tiered cash payments discussed in the court’s approval order.

Anyone waiting for compensation should rely on the official settlement administrator for claim-specific information and distribution updates. At the same time, customers should keep monitoring their financial accounts, strengthening their passwords and watching for identity theft or phishing attempts.

The bottom line: The settlement has received final approval, but individual payment eligibility and timing depend on the applicable settlement rules and processing requirements. Checking official notices is the most reliable way to understand what happens next.