AT&T Data Breach Settlement Update: Payment Timeline and Claim Status

AT&T customers who filed claims over the company’s 2024 data breaches are waiting for compensation after a federal judge granted final approval of a $177 million class-action settlement on October 2, 2026. The settlement resolves lawsuits connected to two separate incidents that exposed sensitive customer information, including Social Security numbers and telephone call records.

The approval marks a major development in the litigation, which began after AT&T disclosed the data incidents in 2024. However, customers should not assume that payments have already been issued. Under the settlement terms, distribution must wait until the applicable appeals period has expired or appeals are resolved, and the settlement administrator has reviewed the submitted claims.

According to reporting published on October 15, 2026, some customers could receive estimated cash payments of approximately $6.50 to $40, depending on the settlement category. Customers who submitted qualifying evidence of financial losses may be eligible for higher reimbursement, subject to the settlement’s rules.

Here is what customers need to know about the settlement amount, payment timeline, eligibility, court decision and next steps.

Latest AT&T Settlement Update: When Will Payments Arrive?

The most significant update came on October 2, 2026, when the court granted final approval of the settlement, according to the official settlement website.

The agreement covers two separate data incidents, commonly identified as AT&T 1 and AT&T 2. Eligible customers who submitted valid claims may receive compensation from the applicable settlement fund.

The settlement agreement provides for distribution within 60 days of its effective date, but that does not mean the 60-day period necessarily began on October 2. The effective date and the completion of the required appeal and claims-review processes are important to determining when payments can actually be distributed.

The settlement administrator has not publicly confirmed a single payment date applicable to every claimant in the information reviewed for this article.

Sources: Official settlement website (https://www.telecomdatasettlement.com/)

How Much Money Could AT&T Customers Receive?

The amount depends on which data incident affected the claimant, whether the claimant qualified for a particular payment category and how many valid claims were submitted.

The $177 million settlement is not a promise that every affected customer will receive an equal share. Administrative expenses, court-approved attorneys’ fees, service awards and qualifying documented-loss claims affect the money remaining for general cash payments.

Estimated cash payments

A report published by CT Insider on October 15, 2026, cited the following estimated payment ranges for certain cash-payment categories:

These figures are estimates, not guaranteed payment amounts. The actual distribution depends on the final net settlement funds and the number of valid claims.

The distinction between the categories is important. Under the settlement terms, AT&T 1 Tier 1 claimants had their Social Security numbers included in the affected data, while Tier 2 claimants had other covered data elements exposed but not their Social Security numbers. Tier 1 payments are designed to be five times Tier 2 payments.

For AT&T 2, eligible account owners may qualify for a Tier 3 cash payment as an alternative to documented-loss compensation. The rules for line users and end users differ.

Can customers receive up to $5,000 or $2,500?

Yes, eligible claimants may receive reimbursement for documented financial losses, subject to the settlement’s requirements.

• AT&T 1: Up to $5,000 for qualifying losses incurred in 2019 or later that can be fairly traced to the first data incident.
• AT&T 2: Up to $2,500 for qualifying losses incurred on or after April 14, 2024, that can be fairly traced to the second incident.

These are maximum amounts, not automatic payouts. Claimants must have selected the appropriate documented-loss option and supplied acceptable evidence. The settlement administrator reviews the documentation before determining the eligible reimbursement.

The settlement excludes certain categories of claimed losses, including emotional distress, medical bills, estimated lost wages, estimated lost time and losses that have already been reimbursed.

Source: https://www.telecomdatasettlement.com/faq

What Were the Two AT&T Data Breaches?

The settlement addresses two separate security incidents disclosed in 2024. Although both involved customer information, the nature of the exposed data differed.

March 2024: Personal information appeared on the dark web

On March 30, 2024, AT&T announced that a dataset containing company-specific customer information had appeared on the dark web.

AT&T’s preliminary analysis indicated that the dataset affected approximately 7.6 million current account holders and 65.4 million former account holders. The data appeared to date from 2019 or earlier.

The exposed information varied but could include names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers and Social Security numbers.

The incident raised concerns about identity theft, account fraud and the long-term consequences of personal information remaining accessible outside the company’s systems.

July 2024: Call and text metadata was accessed

The second incident involved the illegal downloading of AT&T customer data from a third-party cloud platform hosted by Snowflake.

AT&T disclosed that records covering nearly all of its wireless customers were involved. The data included telephone numbers customers interacted with, counts of interactions, aggregate call durations and, for a small subset, cell-site identification information.

The records covered approximately six months of call and text data from 2022.

Importantly, the reported dataset contained call and text metadata, not the contents of customers’ text messages or the audio of their calls.

Although metadata is different from message content, it can still reveal patterns of communication and potentially sensitive relationships.

How Did the AT&T Data Breach Lawsuit Develop?

The litigation followed the public disclosures of the two incidents.

The litigation was consolidated before U.S. District Judge Ada E. Brown in the Northern District of Texas under the case name In re AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3:24-md-03114-E.

Consolidation allowed related claims involving the two incidents to be handled together. The resulting settlement created separate funds for the two groups of claims.

What Is the Court’s Verdict?

The court has granted final approval of the $177 million settlement, but the settlement is not a verdict finding AT&T legally responsible for the breaches.

That distinction matters.

The settlement resolves the covered class-action claims without an admission of liability or wrongdoing by AT&T. The company previously said it denied allegations that it was responsible for the criminal acts and agreed to settle to avoid the expense and uncertainty of prolonged litigation.

The October 2, 2026, approval is a final court decision approving the settlement arrangement. It is not the same as a trial verdict establishing that AT&T committed every alleged violation.

The settlement’s distribution process must still comply with the agreement’s requirements. Claim reviews, applicable appeals and the determination of the effective date all matter to the timing of payments.

For customers, the practical result is that the settlement has cleared a major legal hurdle, but the amount and timing of an individual payment depend on the person’s claim and the remaining administrative steps.

Who Was Eligible for the AT&T Settlement?

The settlement covers two groups of people in the United States whose data was included in, or involved in, the relevant incidents.

AT&T 1 settlement class

This group includes living people in the United States whose covered personal information was included in the dataset announced on March 30, 2024.

Depending on the information exposed, eligible claimants could qualify for either documented-loss compensation or a Tier 1 or Tier 2 cash payment.

AT&T 2 settlement class

This group includes qualifying AT&T account owners, line users and end users whose data elements were involved in the July 2024 incident.

Eligible account owners may qualify for documented-loss compensation or, where permitted, a Tier 3 cash payment. Line users and end users are subject to different benefit rules.

Some individuals may belong to both settlement classes. They can qualify for benefits under both, subject to the agreement’s requirements and restrictions against using the same evidence of financial loss more than once.

The settlement’s claim deadline was December 18, 2025. That deadline has passed, and the administrator is not accepting ordinary new claims under the expired filing process.

How Can Customers Check Their AT&T Settlement Payment Status?

Customers who already submitted a claim should use the official settlement website to check for updates and available claim information.

1. Visit TelecomDataSettlement.com.
2. Look for the claim-status or class-member information options.
3. Use the Class Member ID supplied in the settlement notice, if requested.
4. Check the contact details associated with the original claim and watch for official communications about claim review or payment.
5. If the status is unclear, contact the court-appointed settlement administrator.

The administrator’s published contact information is:

• Phone: 833-890-4930
• Mail: AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324

AT&T has stated that it does not administer the settlement itself. Kroll Settlement Administration is responsible for the claims process.

Customers should be cautious of unofficial websites, text messages or emails promising immediate payments in exchange for a processing fee, banking password or other sensitive information. Use the court-authorised settlement website for updates.

Why Might AT&T Settlement Payments Be Delayed?

Even after final approval, several factors can affect when money reaches individual claimants.

Appeals: The settlement agreement requires the applicable appeals process to be completed before distribution. An appeal could affect the timing.

Claim verification: The administrator must review claims and determine which qualify for payment. Some claims may require additional documentation.

Documented losses: Claims seeking reimbursement for financial losses require evidence linking those losses to the relevant data incident.

Settlement expenses: Attorneys’ fees, administration costs and other court-approved expenses reduce the funds available for pro rata cash payments.

Payment processing: After distribution is authorised, individual payments may take additional time to process, depending on the delivery method and the administrator’s procedures.

Customers should therefore avoid relying on an assumed date calculated solely from October 2. The official website should be checked for a confirmed distribution announcement.

What Should AT&T Customers Do Now?

For customers who filed valid claims before the deadline, the main step is to monitor the official settlement website and respond to any legitimate communication from the administrator.

Those who received a notice requesting additional evidence should check the instructions and deadline stated in that notice. The settlement FAQ identified September 8, 2026, as the deadline for certain claimants to supply requested documentation. Anyone who missed that deadline should contact the administrator to understand how their claim will be handled.

Customers should also take routine precautions if they believe their personal information was exposed. These may include changing reused passwords, enabling multifactor authentication where available, monitoring account activity and reviewing credit reports for signs of identity theft.

These precautions do not affect settlement eligibility, but they may help reduce the risk of further misuse of personal information.

Conclusion

The AT&T data breach settlement has reached an important milestone: a federal judge granted final approval of the $177 million agreement on October 2, 2026.

The settlement covers two separate 2024 data incidents and provides for different forms of compensation, including estimated tiered cash payments and reimbursement of qualifying documented losses.

However, final approval does not mean all customers have been paid. Distribution remains subject to the applicable appeals process, claim review and the settlement agreement’s effective-date requirements.

Customers who filed claims should check the official settlement website for confirmed payment updates rather than rely on unofficial payout predictions. The court’s approval resolves the covered claims through a settlement, but it does not constitute a trial verdict finding AT&T liable for the alleged wrongdoing.

Last updated: October 16, 2026. Payment estimates and timing may change as the settlement administrator completes its work and announces further developments.