AT&T Data Breach Settlement: Final Approval Granted October 2, 2026
Independently fact-checked against primary sources (last audited September 17, 2026). · 3 primary sources cited on this page. How we verify our legal content

At a glance
- Status
- Approved, awaiting payment
- Defendant
- AT&T Inc.
- Settlement fund
- $177,000,000
- Claim deadline
- December 18, 2025
- No-proof cash option
- Yes — Est. $39 to $40 (AT&T 1 Tier 1); $6.50 to $8.10 (AT&T 2)
- Max documented payout
- $5,000
- Administrator
- Kroll Settlement Administration LLC
- Official site
- www.telecomdatasettlement.com
- Court
- United States District Court for the Northern District of Texas (Dallas Division)
- Case number
- 3:24-md-03114-E (consolidated case 3:24-cv-0757-E)
Last verified October 5, 2026
Key dates
| Milestone | Date | What it means |
|---|---|---|
| Claim deadline | December 18, 2025(passed) | Last day to file for a payment |
| Opt-out (exclusion) deadline | November 17, 2025(passed) | Last day to leave the settlement and keep the right to sue |
| Objection deadline | November 17, 2025(passed) | Last day to object to the terms |
| Final approval hearing | January 15, 2026(passed) | When the judge decides whether to approve the settlement |
| Expected payout | Not yet scheduled | Payments are not sent until after final approval and any appeals |
Where to file
AT&T Data Breach Settlement is administered by Kroll Settlement Administration LLC. The only place to file is the official settlement website:
Verify on the official sitewww.telecomdatasettlement.com
Filing is free. No legitimate settlement charges a fee to file a claim.
You cannot file on RecordingLaw.com. We are an independent publisher, not the settlement administrator, and we are not affiliated with any court, agency, or defendant.
Where the AT&T Settlement Stands Right Now
A federal judge granted final approval of the AT&T data breach settlement on October 2, 2026. That decision had been outstanding since the January 15, 2026 fairness hearing, and it is the step the whole case was waiting on.
Senior Judge Sidney A. Fitzwater signed the 73-page memorandum opinion and order in In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114 (N.D. Tex.), ECF No. 85. The case reached him in August 2026: Judge Ada Brown, who had granted preliminary approval and held the fairness hearing, recused herself on August 14, 2026, and the Judicial Panel on Multidistrict Litigation reassigned the proceeding to Judge Fitzwater on August 17, 2026.
The claim deadline was December 18, 2025, and it remains closed. No new claims can be filed, and nothing on this page is a claim form. If you filed by that deadline, your claim is in the administrator's hands.
What has not happened yet is payment. A final approval judgment is subject to appeal, and distribution follows the settlement's effective date once any appeal period runs. The court's order does not set a payment date, so this page does not state one. Treat any call, text or site that gives you a specific payment date or dollar figure as unreliable.
What Happens Next
A settlement moves through distinct steps, and mixing them up is why the timeline confuses people.

Preliminary approval came first, in June 2025: a judge decided the deal was fair enough to notify the class and open the claims period. If you saw a mid-2025 headline calling AT&T's $177 million settlement "approved," that was preliminary approval, not the final decision.
Final approval is the judge's actual ruling on the full record, and it was granted on October 2, 2026, after the January 15, 2026 fairness hearing. The court approved the settlement agreement with one modification, to the cy pres process described below, and it overruled the objections other than that one.
After a judge grants final approval, objectors generally may appeal to the court of appeals. An appeal is a normal procedural step rather than a sign that something went wrong, and it can extend the timeline. Only once the settlement reaches its effective date does the administrator finish processing claims and money move. The order does not fix a payment date, and neither does this page.
What Happened
The $177 million settlement resolves two AT&T incidents, tracked as two classes. AT&T-1 covers a breach AT&T announced March 30, 2024, when AT&T customer data turned up on the dark web. AT&T-2 covers a separate incident AT&T disclosed around July 12, 2024, involving unauthorized access to an AT&T workspace on the Snowflake cloud platform, exposing phone-number and call-and-text interaction data for account owners and users. Someone affected by both incidents may be able to recover from both funds.
Roughly $149 million of the fund is set aside for AT&T-1 and roughly $28 million for AT&T-2. Some AT&T-1 class members had Social Security numbers exposed, which is why the settlement pays that group differently, described below. AT&T is headquartered in Dallas, which is also why the case landed in the Northern District of Texas; Texas, like every state, has its own data breach notification law that required AT&T to tell affected residents what happened.
Who Was in the Class
You may be a class member if either of these describes you, based on the official class definitions:
- AT&T-1: a living person in the United States whose data was included in the incident AT&T announced March 30, 2024.
- AT&T-2: an AT&T account owner, or a line or end user on an AT&T account, whose data was involved in the incident announced around July 12, 2024.
The official site does not publish an exact class size. Public reporting put the March 2024 incident at roughly 7 million current and 65 million former customers, an unconfirmed estimate, not an official count. A notice AT&T already sent you, or a confirmation from the administrator, is the most reliable way to know your status.
A Settlement Payment Is Not Protection
There is still no payout date, and whatever class members eventually receive does not change what was exposed. If your Social Security number was in the AT&T-1 data, the free step comes first: a credit freeze at Equifax, Experian, and TransUnion. If you want ongoing alerts on your own identity after that, Aura is one paid option.
Learn About AuraAffiliate disclosure: if you sign up through this link we may earn a commission, at no extra cost to you. Learn more
How Much People Realistically Get
Nobody knows the exact dollar amount yet, including the administrator. The $177 million fund has to stretch across every valid claim filed, so the more claims filed, the smaller each payment gets. That is what "pro rata" means, and no settlement can promise you a number in advance.

The October 2, 2026 order puts real numbers on this for the first time. Reporting the settlement administrator's figures, and expressly "contingent on certain variables," it estimates tiered cash payments of $39 to $40 for AT&T-1 Tier 1, $7.50 to $8.10 for AT&T-2 Tier 2, and $6.50 to $7.10 for AT&T-2 Tier 3. The court explained that the tiers are "structured so as to provide greater relief to those Settlement Class Members who had more sensitive personal information exposed in the Data Incidents."
The scale explains the arithmetic. The order records 4,918,073 claims received, of which 1,099,732 were rejected as late, duplicate, fraudulent, released, withdrawn or ineligible, including 804,381 declined for fraud, roughly 16 percent of all claims received. Of the claims allowed, 1,654,046 were Tier 1, 687,859 were Tier 2 and 1,582,248 were Tier 3.
Rather than take a tiered payment, a class member could claim documented losses tied to the breach, capped at up to $5,000 for AT&T-1 and up to $2,500 for AT&T-2. That path needed real records, and the cap is a ceiling, not a typical outcome. The order also notes that those with documented out-of-pocket losses are compensated before tiered cash payments are made. The estimates above are the administrator's, not a promise, and they can still move as deficient claims are resolved.
The court also approved the costs of running the case out of the same funds: attorney's fees of one third of each fund, $49,666,666.66 for AT&T-1 counsel and $9,333,333.33 for AT&T-2 counsel, $59 million together; litigation expenses of $828,612.64 and $231,438.36 respectively; and service awards of $1,500 for each class representative, $54,000 in total. One objection did land: objectors challenged the designation of the Texas Bar Foundation as the cy pres recipient, and the court modified the cy pres process, noting that cy pres is disfavored while further direct distribution to class members remains feasible.
What Proof Was Needed, and How Filing Worked
The tiered cash option needed no documentation, only confirmed class membership. The documented-loss option needed real records tying an actual loss to one of the two incidents: statements, receipts, or fraud records. Both paths are closed to new filers now.
Filing was free, only ever through the official settlement site, run by the court-appointed administrator, Kroll Settlement Administration LLC. If you filed by December 18, 2025, there is nothing further to submit; your claim will be processed once approval is final and any appeal window closes. Waiting for a ruling does not mean your claim was lost.
If Your Data Was Exposed, Do This Now
Whatever happens with the settlement, some AT&T-1 class members had their Social Security number exposed. That kind of exposure lets someone open new credit in your name, and it is worth acting on now instead of waiting on a settlement check with no date attached.
The strongest free protection is a credit freeze at all three major bureaus, Equifax, Experian, and TransUnion. It blocks lenders from opening new credit in your name, it is free by federal law, and no bureau can charge you for it. Our guide to freezing your credit after a data breach walks through all three, step by step.
If you already suspect your identity has been misused, not just exposed, IdentityTheft.gov, the FTC's free recovery site, builds a personalized recovery plan with pre-filled letters for creditors and bureaus. Watch your accounts for anything you did not authorize, and be skeptical of any call, text, or email about your AT&T claim asking for payment, or your Social Security number, to "verify" anything. If a claim message includes a link, you can hold it up against AT&T's official settlement site with our settlement notice checker.
A Credit Freeze Is Free. Some Coverage Isn't.
A freeze at all three bureaus is the strongest, free defense against someone opening new credit in your name. Aura adds broader monitoring, Social Security number and dark-web alerts, and coverage for existing accounts a freeze does not touch. Worth a look for your own credit once the free basics are in place.
See Aura's Monitoring PlansAffiliate disclosure: if you sign up through this link we may earn a commission, at no extra cost to you. Learn more
More Open and Closed Settlements
If AT&T is not the only company that notified you of a breach, our data breach settlement tracker lists the settlements we have verified, open and closed.

Frequently Asked Questions
Is the AT&T data breach settlement still accepting claims?
No. The claim window closed on December 18, 2025 and final approval has now been granted, so the AT&T data breach settlement is not accepting new claims. No website can reopen the deadline for you.
Did a judge approve the AT&T settlement?
Yes. Senior Judge Sidney A. Fitzwater granted final approval on October 2, 2026 in the Northern District of Texas, ECF No. 85 in MDL No. 3:24-md-03114, approving the settlement with a modification to the cy pres process.
When will I get my AT&T settlement payment?
The October 2, 2026 order does not set a payment date. A final approval judgment is subject to appeal, and distribution follows the settlement reaching its effective date, after which the administrator finishes processing claims. Any specific payment date you see quoted is not from the court order.
Is the AT&T settlement on appeal?
As of October 5, 2026, this page does not state that an appeal has been filed, because the record we have read does not show one. Now that final approval has been granted, an appeal by an objector is a normal possible next step that would extend the timeline rather than a sign that something went wrong.
How much money will I get from the AT&T settlement?
The order reports the administrator estimate, contingent on certain variables, of $39 to $40 for AT&T-1 Tier 1, $7.50 to $8.10 for AT&T-2 Tier 2 and $6.50 to $7.10 for AT&T-2 Tier 3. These are estimates from a fixed pro rata fund, not guaranteed amounts, and documented-loss claims follow a separate capped path.
Who is eligible for the AT&T data breach settlement?
The classes cover people whose data was involved in the AT&T-1 incident announced March 30, 2024 or the AT&T-2 incident announced around July 12, 2024. Eligibility was determined through the claims process that closed on December 18, 2025, so this is now a question about claims already filed.
Why were so many AT&T claims rejected?
The order records 4,918,073 claims received and 1,099,732 rejected as late, duplicate, fraudulent, released, withdrawn or ineligible. Of those, 804,381 were declined for fraud, about 16 percent of all claims received, and the court specifically scrutinized the administrator fraud-detection process before approving the settlement.
Was my Social Security number exposed in the AT&T breach?
It depends which of your data was involved. The court noted the tiers were structured to give greater relief where more sensitive information was exposed. Check the breach notice AT&T sent you, and consider a free credit freeze either way.
How to tell a settlement notice is real
Check the case name, case number, and court against the official settlement site. Go to that site directly instead of clicking a link in an email or text. Nobody legitimate will call, text, or email out of the blue asking for your Social Security number, bank account, or card details, and nobody will charge you to file. Report anyone who does at ReportFraud.ftc.gov.
Already have a notice with a link or sender address? Paste it into our settlement notice checker to compare it with the official claim sites we track.
Informational only. Not legal, tax, or financial advice, and not affiliated with any settlement.
RecordingLaw.com is an independent legal-information publisher. We are not a law firm, not a settlement administrator, and not affiliated with, endorsed by, or acting on behalf of any court, government agency, defendant, or claims administrator described on this page. Reading this page does not create an attorney-client relationship.
We do not process claims and we never collect your claim information. You cannot file a claim on RecordingLaw.com. To file, opt out, object, or check your status, use only the official settlement administrator identified above. We link to it for your convenience.
Filing a legitimate claim is free. No legitimate settlement or administrator will charge you a fee to file, or ask for your Social Security number, bank, or card details by unsolicited call, text, or email. If someone does, it is likely a scam. Report it at ReportFraud.ftc.gov.
Deadlines, amounts, and approval status change and are set by the court. We verify against the official administrator and court records, but confirm the current details on the official site before acting. Nothing here guarantees eligibility, a payment, or any amount. Settlement payments may be taxable. See IRS Publication 4345. and consult a tax professional. For advice about your specific situation, consult a licensed attorney in your state. Affiliate disclosure.
Updates
Independently fact-checked against the cited primary sources
Independently fact-checked against the cited primary sources
The Law Behind This Article
This article rests on the statutory provisions below, held in our own legal record and retrieved from the official source. Tap a section to read the operative text.
United States Code Title 47
§ 222Privacy of customer informationIn forcecited in 2 of our articles
Every telecommunications carrier has a duty to protect the confidentiality of proprietary information of, and relating to, other telecommunication carriers, equipment manufacturers, and customers, including telecommunication carriers reselling telecommunications services provided by a telecommunications carrier. A telecommunications carrier that receives or obtains proprietary information from another carrier for purposes of providing any telecommunications service shall use such information only for such purpose, and shall not use such information for its own marketing efforts. Except as required by law or with the approval of the customer, a telecommunications carrier that receives or obtains customer proprietary network information by virtue of its provision of a telecommunications service shall only use, disclose, or permit access to individually identifiable customer proprietary network information in its provision of (A) the telecommunications service from which such information is derived, or (B) services necessary to, or used in, the provision of such telecommunications service, including the publishing of directories.
Official text (excerpt) · last checked 2026-09-17 · Read the full text in our law library · Verify at uscode.house.gov
Cited in 125 court opinions in our collectionLatest citing opinion in our collection: 2026
Opinions citing this section in our collection:
- Carpenter v. United States (Supreme Court of the United States 2018, 585 U.S. 296)“…use they are in essence his personal papers by operation of 47 U. S. C. §222. That statute imposes certain restrictio…”
- Federal Trade Commission v. Accusearch Inc. (Court of Appeals for the Tenth Circuit 2009, 570 F.3d 1187)“…closure under § 702 of the Telecommunications Act of 1996, 47 U.S.C. § 222 (2006)) constituted an unfair practice…”
- U.S. West, Inc. v. Federal Communications Commission (Court of Appeals for the Tenth Circuit 1999, 182 F.3d 1224)“…capricious interpretation of the controlling provisions of 47 U.S.C. § 222 and are impermissible because they vio…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: Supreme Court Upholds FCC Fines Over Carrier Location Data (2026)
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- U.S. Judicial Panel on Multidistrict Litigation: Transfer Order, In re AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3114(govinfo.gov).gov
- IdentityTheft.gov (Federal Trade Commission)(identitytheft.gov).gov
- Credit Freeze or Fraud Alert: What's Right for You? (FTC Consumer Advice)(consumer.ftc.gov).gov
- In re: AT&T Inc. Customer Data Security Breach Litigation, Official Settlement Website (Kroll Settlement Administration)(telecomdatasettlement.com)
- AT&T Data Incident Settlement: Frequently Asked Questions (official)(telecomdatasettlement.com)
- AT&T Data Incident Settlement: Case Documents (official, includes Motion for Final Approval)(telecomdatasettlement.com)