AT&T customers who were affected by two major data breaches in 2024 could soon receive money from a $177 million settlement after a federal judge approved compensation for people whose personal information was compromised.
On October 2, 2026, U.S. District Judge Sidney A. Fitzwater granted final approval to the settlement in the Northern District of Texas, clearing a major legal hurdle for millions of current and former customers who filed claims.
Some eligible customers could receive as much as $5,000, while others may qualify for smaller payments depending on which breach affected them, whether they experienced financial losses, and the type of claim they submitted.
The money is being distributed because customers filed lawsuits accusing AT&T of failing to adequately protect sensitive personal information. The lawsuits alleged that the company’s security practices left customers vulnerable to unauthorized access, potentially exposing them to identity theft, fraud, and other financial consequences.
AT&T agreed to settle the litigation without admitting wrongdoing or legal responsibility.
The $177 million settlement combines two separate cybersecurity incidents disclosed months apart in 2024.
The first incident was announced on March 30, 2024, after AT&T discovered that personal information connected to approximately 73 million current and former customers had appeared in a dataset circulating on the dark web.
The exposed information varied by customer but included names, phone numbers, email addresses, mailing addresses, dates of birth, account passcodes, billing account numbers, and Social Security numbers.
Approximately 7.6 million current customers and 65.4 million former customers were affected.
Social Security numbers raised particular concerns because they can be used alongside other stolen information to commit identity theft, open fraudulent accounts, or impersonate individuals.
The second breach was disclosed on July 12, 2024, when AT&T revealed that customer information had been illegally downloaded from a workspace hosted on a third-party cloud platform operated by Snowflake.
Unlike the earlier incident, the second breach primarily involved records of customer calls and text message interactions.
Those records included telephone numbers customers communicated with, the frequency of certain interactions, and aggregated call durations. For a smaller group, the compromised records also contained cell site identification numbers associated with communications.
AT&T said the downloaded information did not contain the actual contents of calls or text messages.
Following both disclosures, customers brought legal actions alleging that AT&T should have done more to safeguard their information.
The lawsuits were eventually brought together for settlement purposes, resulting in two separate compensation funds totaling $177 million.
Of that amount, $149 million is allocated to claims involving the March 2024 incident, while million is designated for the July 2024 breach.
Customers whose information was exposed in the first breach were eligible to request up to $5,000 for documented financial losses connected to the incident, subject to the settlement’s requirements.
These payments are intended to compensate eligible individuals for qualifying financial harm associated with the exposure of their information, rather than simply rewarding them for being AT&T customers.
Claimants seeking reimbursement had to provide supporting documentation establishing their losses and connecting those expenses to the breach. The settlement covers qualifying losses within its specified time periods, including eligible losses dating to 2019 for the first incident.
Customers who did not submit documentation of financial losses could instead request a tiered cash payment.
Under that option, people whose Social Security numbers were included in the March breach qualify for a payment calculated at five times the amount provided to claimants whose other personal information was exposed without their Social Security numbers.
That structure recognizes the different categories of information involved while distributing the available settlement money among approved claims.
For the second breach, eligible customers could request up to $2,500 for documented losses associated with the July incident. The settlement specifies qualifying losses beginning April 14, 2024, subject to its documentation and eligibility rules.
Certain account owners also had the option of selecting a proportional cash payment without documenting a specific financial loss.
Customers affected by both incidents could qualify under both settlement classes, potentially making them eligible for up to $7,500 in combined documented-loss compensation.
However, claimants cannot use the same financial loss or supporting documentation to collect reimbursement twice.
The maximum amounts are not automatic payouts. Actual compensation depends on the claim submitted, the supporting evidence, the number of approved claims, and the money available for distribution.
Settlement administration expenses, court-approved attorneys’ fees, and other authorized costs are deducted before the remaining funds are distributed.
For customers who selected tiered payments, the amounts could be significantly smaller than the advertised $5,000 maximum.
The settlement also does not mean that every person whose information was exposed will automatically receive a check.
Customers were required to submit a claim by December 18, 2025. That deadline has passed, meaning affected individuals who did not file cannot submit a new claim under the published settlement process.
For those who submitted valid claims, attention now turns to when payments will arrive.
Following the October 2 court approval, the settlement must become legally effective before distributions can begin. That process includes allowing the applicable appeal period to expire and completing the review of submitted claims.
If no appeals or other procedural issues delay the process, November 12, 2026, has been identified as a possible effective date.
Under the settlement agreement, payments are scheduled to be distributed within 60 days after the effective date.
That could mean some eligible customers receive payments before the end of 2026, with others potentially receiving money in January 2027. However, an official payment date has not been confirmed.
Approved payments may be delivered electronically or through paper checks, depending on the distribution arrangements.
Customers who filed claims can review available updates through the official settlement website, TelecomDataSettlement.com, or contact settlement administrator Kroll at 833-890-4930.
The October ruling brings the case closer to resolution after more than two years of legal disputes surrounding the exposure of AT&T customer data.
Although the company has not admitted liability, the agreement establishes a compensation process for eligible customers who submitted claims over the two incidents.
