Snowflake Data Breach Settlements Tracker

As of August 24, 2026, no settlement in this group is currently open for claims. The list below tracks each one and its status.

What Happened

Between April and June 2024, attackers used stolen login credentials to break into customer accounts on Snowflake, a cloud data platform that large companies use to store and analyze information. Snowflake itself was not hacked. Instead, the attackers, linked to a group known as ShinyHunters, logged into the accounts of dozens of Snowflake’s corporate customers using credentials that were not protected by multi-factor authentication, and copied the data those companies had stored there.

Because one attack technique reached so many companies at once, it produced a wave of separate breaches and separate lawsuits. Many of them were consolidated into a single federal proceeding, MDL No. 3126, in the U.S. District Court for the District of Montana. Each affected company faces its own claims and is settling, or contesting, on its own timeline, which is why there is no single "Snowflake settlement" to file one claim for.

That fragmentation is exactly what scammers exploit. A person who got several breach notices in 2024 may be in more than one of these cases, each with its own official administrator and its own deadline. This page tracks the ones we have verified so you can tell which is which.

Settlements in This Group

  • Ticketmaster Data BreachNo claim window yet

    Consolidated federal litigation arising from a cluster of breaches of customer accounts on the Snowflake cloud platform (Apr-Jun 2024) affecting multiple Snowflake corporate cli...

  • AT&T Data Breach SettlementPending final approval

    Claim deadline: December 18, 2025 · no-proof cash option

    Two overlapping classes: the AT&T-1 class covers living U.S.

Other settlements in this group

These related settlements are part of the same event. We do not have a dedicated page for each, but here is where they stand so you can map the whole picture.

  • Advance Auto Parts. A roughly $10 million settlement covering about 2.3 million people affected in the same Snowflake campaign, with a documented-loss option and a smaller flat California payment. Its final approval was granted in October 2025 and payments began in early February 2026, so its claim window has closed.
  • Neiman Marcus. A roughly $3.5 million settlement for the Snowflake-linked breach of Neiman Marcus customer data. Its claim window closed in October 2025 and it reached final approval that same month.
  • AT&T (note on which class is the Snowflake one). AT&T faced two overlapping classes. The one tied to this event, sometimes called the AT&T-2 class, concerns the call and text records taken in the 2024 Snowflake-credential campaign. AT&T’s cases are consolidated in a separate MDL in Texas rather than the Montana Snowflake MDL, but the underlying event is the same. See the AT&T page above for its status and deadline.

How To Spot a Settlement Scam

A breach this large draws copycat sites. You file only at each settlement's official court-appointed administrator, reached by typing the address yourself, never through an unsolicited email, text, or search ad. No legitimate settlement charges a fee to file, and none will contact you out of the blue asking for your Social Security number or bank details. Report anyone who does at ReportFraud.ftc.gov.

How to tell a settlement notice is real

Check the case name, case number, and court against the official settlement site. Go to that site directly instead of clicking a link in an email or text. Nobody legitimate will call, text, or email out of the blue asking for your Social Security number, bank account, or card details, and nobody will charge you to file. Report anyone who does at ReportFraud.ftc.gov.

Whether or not any of these settlements pays you, the most valuable step after a breach is free: place a credit freeze at all three bureaus, and read your step-by-step freeze guide. A freeze stops new accounts being opened in your name and costs nothing.

Frequently Asked Questions

Is there one Snowflake data breach settlement I can file a claim for?

No. The 2024 Snowflake credential attacks hit many companies separately, and each company has its own lawsuit, its own settlement, and its own claims administrator. There is no single combined claim form. You file with each affected company’s official administrator, and only if you were in that company’s breach.

Which companies were affected by the Snowflake attacks?

Dozens of Snowflake’s corporate customers were affected, including well-known names such as Ticketmaster, AT&T, Advance Auto Parts, and Neiman Marcus. Many of the resulting cases were consolidated as MDL No. 3126 in the District of Montana. If you received a breach notice from one of these companies in 2024, it may relate to this event.

Was Snowflake itself hacked?

No. The attackers did not break Snowflake’s own systems. They used stolen usernames and passwords, many lacking multi-factor authentication, to log into the separate accounts that Snowflake’s corporate customers maintained on the platform. That distinction is why each affected company, not Snowflake, is the defendant in these settlements.

How do I protect myself if my data was in one of these breaches?

Place a free credit freeze at all three bureaus, which stops new accounts being opened in your name and costs nothing. Watch your statements and credit reports, and use IdentityTheft.gov if fraud has already happened. Then check whether the specific company that notified you has an open settlement, and file at its official administrator before the deadline.

Is RecordingLaw a settlement administrator for these cases?

No. RecordingLaw.com is an independent legal-information publisher, not a law firm, court, or claims administrator. You cannot file a claim here and we never collect claim information. Each settlement links out to its own official court-appointed administrator, the only place to file.

Sources and References

  1. United States Judicial Panel on Multidistrict Litigation(jpml.uscourts.gov).gov
  2. Federal Trade Commission: Report Fraud(reportfraud.ftc.gov).gov
  3. Federal Trade Commission: What To Know About Credit Freezes and Fraud Alerts(consumer.ftc.gov).gov
  4. Identity Theft Recovery Steps (IdentityTheft.gov)(identitytheft.gov).gov

Informational only. Not legal, tax, or financial advice, and not affiliated with any settlement.

RecordingLaw.com is an independent legal-information publisher. We are not a law firm, not a settlement administrator, and not affiliated with, endorsed by, or acting on behalf of any court, government agency, defendant, or claims administrator described on this page. Reading this page does not create an attorney-client relationship.

We do not process claims and we never collect your claim information. You cannot file a claim on RecordingLaw.com. To file, opt out, object, or check your status, use only the official settlement administrator identified above. We link to it for your convenience.

Filing a legitimate claim is free. No legitimate settlement or administrator will charge you a fee to file, or ask for your Social Security number, bank, or card details by unsolicited call, text, or email. If someone does, it is likely a scam. Report it at ReportFraud.ftc.gov.

Deadlines, amounts, and approval status change and are set by the court. We verify against the official administrator and court records, but confirm the current details on the official site before acting. Nothing here guarantees eligibility, a payment, or any amount. Settlement payments may be taxable. See IRS Publication 4345. and consult a tax professional. For advice about your specific situation, consult a licensed attorney in your state. Affiliate disclosure.