AT&T data breach settlement: where it stands

Claims closed

Claim deadline: December 18, 2025, submitted online or postmarked by this date.

Status as recorded on October 1, 2026.

One settlement covers two AT&T data incidents: customer data fields found in a data set released on the dark web, announced March 30, 2024, and call and text records downloaded from an AT&T workspace on a third-party cloud platform, announced July 12, 2024; AT&T settled both without admitting liability or wrongdoing. The claim deadline has passed, and in the latest official record we could read, the court had not yet decided whether to approve the settlement.

Key facts

Case

In re: AT&T Inc. Customer Data Security Breach Litigation, No. MDL 3:24-md-03114-E (lead case 3:24-cv-00757-E) U.S. District Court for the Northern District of Texas (Dallas Division), MDL No. 3:24-md-03114-E In re AT&T Inc. Customer Data Security Breach Litigation, official settlement websitechecked October 1, 2026, archived copy of August 3, 2026

Defendant

AT&T Inc. and affiliated AT&T entities (AT&T Mobility, AT&T Corporation, DirecTV, AT&T Services, Cricket Wireless)

Who is included

AT&T 1 class: living persons in the United States whose data elements were in the data set announced March 30, 2024. AT&T 2 class: AT&T account owners, or line or end users (including customers of carriers that use the AT&T network), whose call and text records data were involved in the incident announced July 12, 2024.

Claim deadline

December 18, 2025 submitted online or postmarked by this date

Opt-out (exclusion) deadline

November 17, 2025

Objection deadline

November 17, 2025

Final approval hearing

January 15, 2026

What a claimant can receive

Two non-reversionary funds, $149 million (AT&T 1) and $28 million (AT&T 2). AT&T 1 members could claim documented losses up to $5,000 (losses from 2019) or a pro rata tier payment (Tier 1, SSN involved, five times Tier 2). AT&T 2 members could claim documented losses up to $2,500 (from April 14, 2024); account owners could instead claim a pro rata Tier 3 payment. No per-person amount is stated. Distribution begins only after court approval, the end of all appeals and review of all claims; no payment date is given. U.S. District Court, N.D. Tex., ECF 44, filed June 20, 2025checked October 1, 2026

Proof of purchase or loss needed

Documented loss payments: yes, reasonable documentation and a sworn claim. Tier payments: a claim form with the Class Member ID, no loss documentation.

Tier without proof

AT&T 1 Tier 1 and Tier 2, and AT&T 2 Tier 3 (claim form and Class Member ID only; claims are closed)

Settlement administrator

Kroll Settlement Administration

Official settlement website

telecomdatasettlement.com

Read in the official record on October 1, 2026. A row without its own source mark comes from the source marked above it.

What the official record shows, and how recent it is

The official settlement website could not be opened when this page was checked, so its pages were read in Internet Archive copies; each source mark gives the date of the copy used. The newest update notice on the site in those copies is dated April 23, 2026 In re AT&T Inc. Customer Data Security Breach Litigation, official settlement websitechecked October 1, 2026, archived copy of August 3, 2026, and it reads: "The Final Approval Hearing was held on January 15, 2026. The Settlement Administrator is reviewing and processing claims while the Court continues to consider whether it will approve the Settlement."

The court's own docket, read on CourtListener, shows no final approval order either. Its last known filing is August 17, 2026 (order reassigning the MDL to Judge Fitzwater) U.S. District Court, N.D. Tex., MDL 3:24-md-03114 docket as mirrored by CourtListenerchecked October 1, 2026. Because the live site may say more than these copies, open it yourself for today's status; our case lookup guide shows how to follow the docket.

Who is in the two classes

• AT&T 1: All living persons in the United States whose Data Elements were included in the AT&T 1 Data Incident announced on March 30, 2024 U.S. District Court, N.D. Tex., ECF 44, filed June 20, 2025checked October 1, 2026. The data elements were some mix of names, addresses, phone numbers, email addresses, dates of birth, account passcodes, billing account numbers and Social Security numbers.
• AT&T 2: “AT&T Account Owners or Line or End Users whose AT&T 2 Data Elements were involved in the AT&T 2 Data Incident.” These data elements were call and text records. Customers of other carriers that run on AT&T's network may be included; FAQ 26 answers "Possibly" and adds: “For purposes of this settlement, customers of MVNOs that use the AT&T network are considered ‘line or end users.’”

A person can be in both classes. The defendants are AT&T Inc., AT&T Mobility LLC, AT&T Corporation, DirecTV, LLC, AT&T Services, Inc., and Cricket Wireless LLC, so a notice may name any of those companies.

What the real notices carried

The FAQ names the email domain the notices came from: e.emailksa.com (sender attsettlement@e.emailksa.com) In re AT&T Inc. Customer Data Security Breach Litigation, official settlement websitechecked October 1, 2026, archived copy of July 29, 2026. Notices went out by email and by postcard, and each carried a Class Member ID. The claim form asks for the Class Member ID printed on the Email Notice or Postcard Notice (it starts 83231, then 8 more characters). The official site offered a way to resend that ID, and the FAQ says that if you are unsure whether an email relates to the settlement, you can call (833) 890-4930. A Spanish version of the long-form notice exists, and the site calls itself the only authorized website for the case.

Kroll Settlement Administration is the administrator, and its mailing address for this case is AT&T Data Incident Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. A message that matches the sender domain and the ID pattern above matches the official record; it is not proof by itself, because a sender line can be imitated. The phone number to rely on is the one printed in the court-authorized notice. Our notice check walks through the comparison.

The deadlines, all of them past

Nothing on that list can be done now. A class member who did not opt out stays in the settlement. FAQ 22 puts it this way: "If you do nothing, you will not receive any benefits from this Settlement." It adds that if the settlement is approved and becomes final, such a member cannot sue the defendants or the other released parties over the claims the settlement covers. A person who did opt out gets no payment and keeps the right to bring their own lawsuit.

What claimants could ask for

AT&T agreed to two separate, non-reversionary funds, meaning no money goes back to AT&T: $149 million U.S. District Court, N.D. Tex., ECF 44, filed June 20, 2025checked October 1, 2026 for the AT&T 1 class and $28 million for the AT&T 2 class. Each claimant chose between two kinds of payment on the claim form.

• Documented loss. AT&T 1 members could claim up to $5,000 (losses in 2019 or later); AT&T 2 members up to $2,500 (losses on or after April 14, 2024). On proof, the FAQ says: "Claiming Settlement Class Members will be required to submit reasonable documentation supporting the losses." It adds that self-prepared documents are not enough by themselves, and the claim is attested under penalty of perjury. The administrator pays approved documented-loss claims first, out of each class's own net fund; the notice then describes the money left "after all Documented Loss Payments are applied (up to $25,000,000 for AT&T 1)" as what is shared pro rata.
• A tier payment. AT&T 1 members could claim a pro rata share instead: Tier 1 if their Social Security number was involved, worth five times a Tier 2 share, and Tier 2 otherwise. AT&T 2 account owners could claim a pro rata Tier 3 share. The tier payments needed only a claim form with the Class Member ID from the notice, without loss documentation Claim Form for AT&T Data Incident, posted on the official settlement websitechecked October 1, 2026, archived copy of October 22, 2025.

Pro rata means the money left after documented losses, fees and costs is divided among valid tier claims, so the size of each share depends on how many people claimed. The official documents say the amounts are unknown at this time; this page gives no estimate. On fees, FAQ 18 says class counsel would ask for attorneys' fees of “up to one-third of the respective Settlement Funds, plus reimbursement of costs incurred in prosecuting and settling the Actions,” and for service awards of no more than $1,500 per class representative. On how the money is sent, the notice names only electronic or ACH payment for online claims; the settlement agreement and any payment guide, which would list the other options, could not be read.

What has to happen before anyone is paid

The official site says when distribution starts: “Distribution of Settlement Class Member Benefits will begin after the Settlement has obtained Court approval, the time for all appeals has expired, and all Claim Forms have been reviewed” In re AT&T Inc. Customer Data Security Breach Litigation, official settlement websitechecked October 1, 2026, archived copy of July 29, 2026. None of the official documents we read gives a payment date. Our payments guide explains how appeals stretch that timeline.

Where other dates and figures come from

• An early notice with other dates. The first long-form notice gave a claim deadline of November 18, 2025 (superseded), an opt-out and objection deadline of October 17, 2025 (superseded) and a hearing on December 3, 2025 (superseded). The court then moved all three (see Order Granting Joint Motion to Amend Preliminary Approval Order to Extend Certain Deadlines), and the site, the claim forms and the FAQ show the new dates. Someone holding an early notice sees the old ones.
• A single fund total. Some sites describe one fund of $177 million (two non-reversionary funds: $149 million and $28 million). No official document prints that total; it is the sum of two funds that pay two different classes.
• Payment dates and claim counts. Some sites give a payment date, or counts of claims and notices. None of these appears in the official documents read for this page.

Sources

1. Home (April 23, 2026 update; Important Dates; Kroll contacts)In re AT&T Inc. Customer Data Security Breach Litigation, official settlement website, archived copy of August 3, 2026
2. Frequently Asked Questions (26 FAQs)In re AT&T Inc. Customer Data Security Breach Litigation, official settlement website, archived copy of July 29, 2026
3. Notice of Proposed Class Litigation Settlement (long form, English; original August 2025 version)Court-authorized Long-Form Notice, posted on the official settlement website, archived copy of August 9, 2025
4. Claim Form, AT&T 1 Settlement ClassClaim Form for AT&T Data Incident, posted on the official settlement website, archived copy of October 22, 2025
5. Claim Form, AT&T 2 Settlement ClassClaim Form for AT&T Data Incident, posted on the official settlement website, archived copy of December 3, 2025
6. Preliminary Approval OrderU.S. District Court, N.D. Tex., ECF 44, filed June 20, 2025
7. Order Granting Joint Motion to Amend Preliminary Approval Order to Extend Certain DeadlinesU.S. District Court, N.D. Tex., ECF 56, filed October 3, 2025
8. In Re: AT&T Inc Customer Data Security Breach Litigation, 3:24-md-03114U.S. District Court, N.D. Tex., MDL 3:24-md-03114 docket as mirrored by CourtListener
9. Important DocumentsIn re AT&T Inc. Customer Data Security Breach Litigation, official settlement website, archived copy of July 29, 2026

Each source listed here was read on October 1, 2026.