AT&T customers whose data was exposed in the company’s two 2024 data breaches had their $177 million class action settlement approved by a federal judge on October 2, 2026. Administrator Kroll estimates about $39 to $40 per claim where a Social Security number was exposed and $6.50 to $8.10 for the other cash tiers; no payment date has been announced.
What Happened?
Senior U.S. District Judge Sidney A. Fitzwater granted final approval of the $177 million AT&T data breach settlement on October 2, 2026, in a 73-page memorandum opinion and order in In re: AT&T Inc. Customer Data Security Breach Litigation, MDL No. 3114, Case No. 3:24-md-03114 in the U.S. District Court for the Northern District of Texas. The order found the settlement fair, reasonable and adequate, overruled the objections against it with one exception concerning leftover funds, and approved class counsel’s requested fees.The ruling ends a wait of nearly nine months since the January 15, 2026 fairness hearing. Claims closed December 18, 2025, and the order does not reopen them. AT&T denied wrongdoing and settled without admitting liability.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
How Much Will Each Claim Pay?
The order repeats Kroll’s current estimates for the three cash tiers, which it describes as contingent on certain variables:- Tier 1 — about $39 to $40. Members of the AT&T 1 class, whose data appeared in the dataset AT&T announced on March 30, 2024, and whose Social Security number was part of it. The settlement sets Tier 1 at five times the Tier 2 amount.
- Tier 2 — about $7.50 to $8.10. AT&T 1 class members whose Social Security number was not exposed.
- Tier 3 — about $6.50 to $7.10. Account owners in the AT&T 2 class, whose call and text records were downloaded from an AT&T workspace on the Snowflake cloud platform, in the incident announced July 12, 2024.
Documented-loss claims are paid instead of a tier payment, up to $5,000 for AT&T 1 losses and up to $2,500 for AT&T 2 losses, and they are paid before the tier amounts are calculated. People in both classes, whom the settlement calls Overlap Members, can be paid from both funds, but the same documentation cannot support two loss claims.
One group of objectors argued that documented-loss claims would use up the entire $28 million AT&T 2 fund and leave nearly 795,000 Tier 3 claimants, by their count, with nothing. The judge rejected that argument after reviewing Kroll’s supplemental declarations, and the figures above are what the court accepted as the expected Tier 3 payment.
Where the $177 Million Goes First
The tier payments come from what is left of each fund after court-approved costs. The order awarded class counsel one-third of each fund, $49,666,666 from the $149 million AT&T 1 fund and $9,333,333 from the $28 million AT&T 2 fund, for about $59 million in total, plus $828,612.64 and $231,438.36 in litigation expenses. It approved service awards of $1,500 for each of the 36 class representatives, $54,000 in all.Administration has cost far more than first projected. Kroll’s original estimate at preliminary approval was $5,453,185; its current estimate is $22,161,587.09, and the court approved only the $18,856,175.48 billed so far while reserving judgment on the rest. The order notes that every dollar spent on administration comes out of the common fund rather than from AT&T, and it lists claims-administration costs as an agenda item for a status conference being set in a separate case management order.
When Will Payments Be Sent?
No payment date had been announced as of October 4, 2026. As the order describes the settlement agreement, payments are to go out electronically or by paper check within 60 days after the settlement’s Effective Date. The official settlement website says benefits will be paid only after the court approves the settlement and any appeals are resolved, so the timing of the first payments depends on whether an objector appeals.About 45 objectors opposed the settlement, some with lawyers and some on their own, and the order states that it made explicit findings on the arbitration argument because that objection may be raised on appeal. Whether an appeal is actually filed will not be known until the appeal period runs.
When Is the Effective Date?
The Effective Date has not happened yet, and it is not a date anyone picks. The settlement agreement defines it with a formula (¶69): it falls 10 days after the time to appeal the final approval order runs out. If someone appeals, it is instead 30 days after the last appellate ruling affirming the approval, or 30 days after an appeal is dismissed with no further right to appeal. Two other deadlines key off it: AT&T must fund the rest of the settlement within 15 days of the Effective Date (¶119), and Kroll must distribute payments no later than 60 days after it (¶173).If no one appeals, and the 30-day federal appeal period runs from the October 2, 2026 order, the dates work out as follows:
| Step | Rule | Date |
|---|---|---|
| Final approval order entered | Memorandum opinion and order, ECF No. 85 | October 2, 2026 |
| Last day to file an appeal | 30 days after the order; the 30th day is Sunday, November 1, so the deadline moves to Monday | November 2, 2026 |
| Effective Date | 10 days after the appeal period runs out (¶69) | About November 12, 2026 |
| AT&T funds the rest of the settlement | Within 15 days of the Effective Date (¶119) | By about November 27, 2026 |
| Kroll’s deadline to pay class members | No later than 60 days after the Effective Date (¶173) | By about January 11, 2027 |
These dates are calculated from the agreement’s terms; neither the court nor Kroll has announced them. Two things could move them:
- An appeal. If an objector files a notice of appeal by the deadline, the Effective Date waits for the Fifth Circuit, and the payment deadline moves with it. Appeals of class settlements commonly take many months to more than a year.
- When the appeal clock starts. Federal appeal deadlines usually run from entry of a separate final judgment. If the court enters one later, the clock starts then. If no separate judgment is ever entered, the federal rules treat judgment as entered 150 days after the order, which would put the appeal deadline around March 31, 2027 and push every later date back by about five months. The docket entry that followed the order on October 2 sets a deadline or hearing rather than entering judgment.
Nothing in the agreement requires anyone to announce the Effective Date itself. The signals to watch are whether a notice of appeal or a final judgment appears on the court docket, any payment update Kroll posts on the official settlement website, and the status conference set by Case Management Order No. 18, which lists claims administration on its agenda.
How Many Claims Were Approved — and Why 804,381 Were Rejected
Kroll reported receiving 4,918,073 claims: 4,163,810 filed online and 754,263 by mail. As of the declaration the court relied on, 1,654,046 were allowed as Tier 1, 687,859 as Tier 2 and 1,582,248 as Tier 3, about 3.92 million in all. Another 1,099,732 were rejected as late, duplicate, fraudulent, released, withdrawn or filed by ineligible businesses, and the order notes the counts may still change as deficient claims are resolved.Fraud was the largest category of rejections. The fraud-screening firm Covalynt, retained through Kroll at the parties’ request, flagged 804,381 claims, about 16% of everything filed. The judge found Covalynt’s methods provided reasonable protection against fraudulent claims and that the review process gives legitimate claimants a meaningful way to challenge a mistaken fraud finding.
That review process works by mail. A claimant whose claim is flagged receives an email with a link to a Validation Form, which must be printed, signed by hand and mailed in its own envelope, postmarked within 21 days of the email. Bulk submissions are not accepted. Those mail-only, one-claimant-per-envelope rules match the ones printed on the denial notices some AT&T claimants received in September.
What the Judge Decided on the Objections and Opt-Outs
The judge rejected arguments that the settlement was inadequate next to T-Mobile’s $350 million data breach settlement, that AT&T’s arbitration clause barred a class settlement, that the absence of credit monitoring made the deal unfair, that state-law differences defeated class treatment, and that the settlement was a “reverse auction” in which AT&T chose the weakest lawyers to negotiate with. The judge also upheld the requirement that opt-out requests carry a handwritten signature.One objection succeeded. Objectors questioned naming the Texas Bar Foundation as the recipient of any money left over after distribution, and the judge agreed its connection to data breach victims was indirect. Leftover money must first be considered for a further distribution to claimants, and any charitable recipient must have a substantial connection to data privacy, cybersecurity, consumer protection or access to justice. The parties were directed to recommend additional candidates.
On opt-outs, the court approved 494 timely requests that met every requirement and 2,332 more submitted through two law firms, over AT&T’s argument that those clients had been misled. It rejected 6,802 requests as late or noncompliant, including 5,999 submitted with electronic rather than handwritten signatures; those people remain in the class and are bound by the settlement.
Why a Different Judge Ruled
U.S. District Judge Ada E. Brown, who granted preliminary approval in June 2025 and presided over the January 15, 2026 fairness hearing, recused herself on August 14, 2026 while the approval motion was still pending. The Judicial Panel on Multidistrict Litigation reassigned the case to Judge Fitzwater on August 17, 2026, and the case number now ends in “-D” rather than “-E.” The order states that Judge Fitzwater read the hearing transcript, the briefing and the objections before ruling. The record does not give a reason for the recusal.What Happens Next
Kroll remains the settlement administrator and will keep processing claims, reviewing documented-loss submissions and resolving deficient and flagged claims before any distribution. The next court milestone is the status conference set by Case Management Order No. 18, entered the same day as the approval order; its date had not been published on the court’s public MDL page as of October 4, 2026. The AT&T data breach settlement page tracks the payment schedule once one is announced.Payment messages in this case come from Kroll Settlement Administration through the official settlement website, and no legitimate administrator charges a fee to release a class settlement payment.
Questions
Has the AT&T data breach settlement been approved?
Final approval was granted on October 2, 2026, when Senior U.S. District Judge Sidney A. Fitzwater of the Northern District of Texas signed a 73-page memorandum opinion and order approving the $177 million settlement, overruling the objections and approving class counsel's fees. Approval is not the same as payment: the official settlement website says benefits are paid only after any appeals are resolved.
How much will each AT&T settlement claim pay?
The court's order relies on Kroll's estimates, which depend on certain variables: about $39 to $40 for a Tier 1 claim (AT&T 1 class members whose Social Security number was exposed), about $7.50 to $8.10 for a Tier 2 claim (AT&T 1 class members without an exposed Social Security number) and about $6.50 to $7.10 for a Tier 3 claim (AT&T 2 account owners whose call records were taken). Documented-loss claims are paid instead of a tier payment, up to $5,000 for AT&T 1 and up to $2,500 for AT&T 2. People in both classes can be paid from both funds.
When will AT&T settlement payments be sent?
No payment date had been announced as of October 4, 2026. As described in the order, the settlement agreement calls for payments to be distributed electronically or by check within 60 days after the Effective Date, and the official settlement website says benefits are paid only after any appeals are resolved. About 45 objectors opposed the settlement, and the order itself anticipates that at least one of their arguments may be raised on appeal.
What is the Effective Date of the AT&T settlement?
The Effective Date has not happened yet. The settlement agreement defines it as 10 days after the time to appeal the final approval order runs out, or, if someone appeals, 30 days after the last appellate ruling affirming approval or 30 days after an appeal is dismissed with no further right to appeal. If no appeal is filed and the 30-day appeal period runs from the October 2, 2026 order, the Effective Date would fall around November 12, 2026, and Kroll's deadline to pay class members, 60 days later, would be around January 11, 2027. Neither the court nor Kroll has announced those dates, and an appeal, or an appeal clock that runs from a later separate judgment, would push them back.
Why were so many AT&T settlement claims rejected?
Of 4,918,073 claims received, 1,099,732 were rejected as late, duplicate, fraudulent, released, withdrawn or from ineligible businesses. Fraud accounted for 804,381 of them, about 16% of all claims, identified by the fraud-screening firm Covalynt. A claimant flagged as fraudulent is notified by email and can ask for review by mailing a signed Validation Form, postmarked within 21 days of the email, in its own envelope.
Can someone still file a claim in the AT&T data breach settlement?
The claim deadline was December 18, 2025, and the final approval order does not reopen it. Class members who did not file a claim and did not validly opt out are bound by the settlement's release but will not receive a payment.
Sources
- Memorandum Opinion and Order granting final approval, ECF No. 85, filed October 2, 2026, on the CourtListener docket for MDL No. 3114
- Settlement Agreement and Release, ECF No. 283-1, ¶¶ 69 (Effective Date), 119 (funding) and 173 (distribution)
- U.S. District Court for the Northern District of Texas MDL 3:24-md-03114-D page, including the August 17, 2026 order reassigning the litigation
- Official AT&T Data Incident Settlement website, administered by Kroll Settlement Administration
OpenClassActions.com is not the settlement administrator and cannot look up a claim or confirm a payment amount. It is a consumer news site, not a law firm, and this article is not legal advice.
