Court Greenlights the $177 Million AT&T Data Breach Settlement | What Claimants Need to Know

Resolving multi-district litigation stemming from two massive customer data security incidents disclosed in 2024, a federal judge has granted final approval to a $177 million class-action settlement with telecom giant AT&T.

Senior District Judge Sidney A. Fitzwater of the U.S. District Court for the Northern District of Texas issued the memorandum opinion and order approving the combined agreement.

The court-sanctioned agreement resolves tens of thousands of consolidated claims filed by current and former customers following the exposure of personal records, Social Security numbers, and customer call and text metadata across two separate security events.

Breakdown of the Dual-Breach Structure

The $177 million net fund is divided into two distinct settlement pools to address the varying scopes of the underlying breaches:

1. The March 2024 dark web incident, a $149 million pool. Covers approximately 7.6 million current account holders and 65.4 million former customers whose sensitive personal data, including names, passcodes, and Social Security numbers, was leaked on dark web forums.
2. The July 2024 Snowflake cloud incident, a $28 million pool. Covers nearly 110 million customers whose call and text interaction metadata, including telephone numbers and record counts, was exfiltrated from the carrier's cloud environment hosted on Snowflake.

Payout Tiers and Documented Loss Caps

Under the terms approved by the court, compensation is categorized into tiered cash distribution pools managed by the third-party settlement administrator, Kroll.

• Standard and tiered cash claims. Claimants whose Social Security numbers were compromised qualify for Tier 1 payments, while non-SSN data class members qualify for Tier 2 or Tier 3 payments.
• Out-of-pocket extraordinary losses. Claimants who suffered documented, unreimbursed financial losses directly traceable to identity theft, fraud, or credit monitoring services stemming from the March 2024 breach can receive up to $5,000. Those impacted by both data incidents who can demonstrate verified losses qualify for combined compensation caps of up to $7,500.

Distribution Timeline and Next Steps for Claimants

While the formal granting of final approval marks a major legal hurdle, distribution of funds will not happen immediately.

• Filing window closed. The deadline to file new claims, modify existing filings, or opt out of the class formally closed on December 18, 2025.
• Deficiency processing. Kroll completed processing deficiency verifications for flagged class members on September 8, 2026.
• Disbursement schedule. Under the settlement agreement terms, electronic transfers and paper checks are required to be distributed within 60 days after the effective date. Provided no third-party legal appeals delay the process following the close of the mandatory post-judgment appeal window, payments are expected to begin arriving between late December 2026 and early 2027.

Class members can track their individual claim verification status and review official court orders directly through the settlement portal at telecomdatasettlement.com. For more consumer and legal accountability coverage, see Local US News and our report on the Magnolia Diagnostics fraud settlement.