AT&T Data Breach Settlement Gets Final Approval: What Claimants Should Know About Payments
By Noura Mint Ely · October 27, 2026
Table of contents
- What happened in the AT&T settlement case?
- How the two AT&T data incidents differed
- How much money is included in the settlement?
- Can customers still file a claim?
- When will AT&T settlement payments arrive?
- How to check an existing claim safely
- What the settlement does—and does not—mean for affected customers
- Why the court’s final approval matters
- Sources
- Frequently Asked Questions
The $177 million AT&T data breach settlement received final court approval on October 2, 2026, resolving lawsuits over two 2024 data incidents.
The deadline to file a claim was December 18, 2025, so customers who missed it generally cannot submit a new claim under the published settlement terms.
People who filed on time should check the official settlement website for updates; no specific payment date has been confirmed in the information reviewed for this report.
The decision is a major step in the litigation involving customer information associated with AT&T, but court approval does not mean every claimant will receive the same amount or that payments will arrive immediately.
Claims must be processed under the settlement terms, and the final order, any applicable appeal-related proceedings, and the administration of the fund all matter to when money can be distributed.
What happened in the AT&T settlement case?
On October 2, 2026, the U.S. District Court for the Northern District of Texas granted final approval to the settlement in In re AT&T Inc. Customer Data Security Breach Litigation.
The court also addressed applications for attorneys’ fees, costs, and service awards.
The decision followed a final approval hearing held on January 15, 2026.
The settlement combines lawsuits arising from two separate data incidents disclosed by AT&T in 2024.
The parties agreed to resolve the cases through a total of $177 million in cash settlement funds: $149 million for the first incident and $28 million for the second.
The agreement resolves the claims without an admission of liability or wrongdoing by AT&T.
For consumers, the immediate question is no longer whether the settlement has been approved.
It has.
The practical questions are whether a person submitted a valid claim before the deadline, which incident their claim concerns, whether further review or proceedings affect distribution, and where to find reliable updates.
How the two AT&T data incidents differed
The first incident: information found in a dataset released on the dark web
AT&T announced the first incident on March 30, 2024, after identifying AT&T-specific fields in a dataset released on the dark web.
Depending on the individual, the information potentially involved included combinations of names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers, and Social Security numbers.
The settlement class for this incident covers living people in the United States whose relevant data elements were included in the incident.
The inclusion of different data types matters.
Exposure of contact information can create opportunities for targeted scams, while account credentials or Social Security numbers may introduce different risks.
The precise information associated with any individual depends on the records involved; the settlement’s broad description should not be interpreted as confirmation that every listed data element was exposed for every affected person.
The second incident: customer records accessed through a third-party cloud environment
AT&T announced a second incident on July 12, 2024.
In this case, certain data was illegally downloaded from an AT&T workspace hosted on a third-party cloud platform.
The incident was associated with a wider security event involving Snowflake-hosted customer environments.
The settlement’s second class includes qualifying AT&T account owners, line users, or end users whose relevant data elements were involved.
The two incidents were consolidated for settlement purposes, but they remain distinct events with different class definitions and settlement funds.
A person’s eligibility depended on the settlement criteria and the records connected to the relevant incident, not simply on whether that person had ever been an AT&T customer.
How much money is included in the settlement?
The settlement provides a combined $177 million in cash funds, allocated as follows:
$149 million for the first AT&T data incident.
$28 million for the second AT&T data incident.
These figures represent the settlement funds, not a guaranteed payment to each customer.
The amount an approved claimant may receive depends on the settlement’s terms, the claim submitted, the applicable category of loss or benefit, and the administration of the relevant fund.
The total fund also is not the same as the amount that any one person can expect to receive.
The settlement documentation provides for attorneys’ fees, litigation costs, and service awards to be considered as part of the court process.
Those amounts affect the administration of the settlement and should not be confused with an individual claimant’s approved benefit.
The court’s October 2 order addresses the relevant applications and approves the settlement with a modification concerning the process for distributing residual funds.
Can customers still file a claim?
The published deadline to submit or mail a claim was December 18, 2025.
That deadline has passed. The official settlement website lists the claim deadline as closed, and the materials reviewed do not establish a general extension or a new opportunity to file a fresh claim.
Customers who did not submit a claim by the deadline should not assume they can join the settlement now.
They should consult the official settlement administrator for any case-specific information rather than rely on social media posts, advertisements, or unofficial websites promising late enrollment.
People who already filed a claim have a different next step: check the official settlement website and contact the administrator if they need information about their submitted claim.
The website identifies Kroll Settlement Administration as the administrator and lists a telephone number for settlement inquiries.
When will AT&T settlement payments arrive?
The court granted final approval on October 2, 2026, but that decision alone does not establish a specific payment date for every claimant.
The settlement website says distribution is tied to court approval, the expiration or resolution of applicable appeals, and the review of claim forms.
The exact timing can therefore depend on procedural developments and the work required to validate claims.
As of October 27, 2026, the sources reviewed for this article do not confirm a universal date on which payments will be sent or a fixed amount that each claimant will receive.
Claimants should use the official settlement website for subsequent announcements and avoid treating predictions about payment timing as confirmed information.
A final approval order is an important legal milestone, but it should not be mistaken for evidence that every administrative step has been completed.
The settlement administrator must still follow the governing terms and any applicable court directions before distributing benefits.
How to check an existing claim safely
Claimants should begin with the official settlement website, which provides court documents, settlement information, and contact details.
It is the appropriate starting point for updates about the case and for finding out how to contact the administrator.
The official site lists 833-890-4930 as the settlement phone number.
Claimants should use the contact information published there rather than an unverified number in a text message, email, social media post, or search advertisement.
Consumers should also be cautious of messages claiming that a payment is ready but asking for an upfront fee, account password, one-time authentication code, or unnecessary sensitive information.
The settlement is being administered through the court-authorized process; an unsolicited message should not be trusted merely because it uses AT&T’s name or refers to a data breach.
If a claimant needs to verify whether a communication is legitimate, they should navigate to the official settlement website independently and use the contact details published there.
They should not rely solely on a link or phone number contained in an unexpected message.
What the settlement does—and does not—mean for affected customers
The settlement resolves the covered lawsuits, but it does not establish that every AT&T customer experienced identity theft, fraud, or financial loss.
Nor does the existence of a settlement mean that every person who used AT&T automatically qualifies for a payment.
Eligibility is tied to the class definitions and the data involved in the incidents.
The case also highlights why the details of a breach matter.
The exposure of names or contact information can create risks different from those associated with account passcodes or Social Security numbers.
People who believe their information may have been involved should take sensible precautions, such as watching for suspicious account activity, being alert to impersonation attempts, and changing credentials where appropriate—particularly if a password or passcode may have been exposed or reused.
These precautions are general security guidance, not a statement that every claimant’s information was exposed in the same way.
Customers should follow any specific instructions they receive through verified AT&T communications and use official account channels to address account-security concerns.
Why the court’s final approval matters
Class-action settlements require court review before they can become final.
In this case, the court considered the settlement after a January 2026 hearing and issued its approval order on October 2, 2026.
The order also considered requests related to legal fees, costs, and representative service awards.
The final approval moves the case beyond the earlier preliminary approval stage.
However, the process remains subject to the settlement’s terms and any applicable post-approval proceedings.
That distinction matters for readers because legal approval, claim validation, and payment distribution are related but separate steps.
For people who filed on time, the most useful action is to monitor the official administrator’s updates.
For people who did not file, the published deadline has passed, and the official website is the best source for any authoritative clarification about the case.
Sources
- Official AT&T Customer Data Security Breach Settlement website — settlement status, eligibility overview, key dates, and the October 2, 2026 final-approval update.
- https://www.telecomdatasettlement.com/
- U.S. District Court for the Northern District of Texas opinion, published through GovInfo — official record of the October 2, 2026 order granting final approval.
- https://www.govinfo.gov/app/details/USCOURTS-txnd-3_24-md-03114/USCOURTS-txnd-3_24-md-03114-0
- Court opinion published by Justia — details of the $177 million settlement funds, the two incidents, and the court’s review.
- https://law.justia.com/cases/federal/district-courts/texas/txndce/3%3A2024cv00757/388149/534/
- Official settlement documents page — settlement agreement, court filings, deadlines, and related case documents.
- https://www.telecomdatasettlement.com/documents
- Click2Houston, October 27, 2026 — current consumer-focused reporting on the final approval, claim deadline, payment uncertainty, and how to check claim information.
- https://www.click2houston.com/news/local/2026/10/27/att-data-breach-settlement-payments-could-arrive-soon-what-customers-need-to-know/
