AT&T $177 Million Data Breach Settlement Nears Payout Stage

Millions of current and former AT&T customers who filed claims in a $177 million class-action settlement are moving closer to receiving payouts following a federal court's final approval. The United States District Court for the Northern District of Texas granted final approval to the agreement, clearing a crucial legal hurdle for the distribution of funds stemming from two major security breaches disclosed in 2024.

The lawsuits alleged that the telecommunications company failed to implement adequate cybersecurity measures to protect sensitive customer information. The settlement is divided into two distinct funding pools: $149 million allocated for a March 2024 incident involving data published on the dark web, and $28 million dedicated to a July 2024 breach where records were downloaded from a third-party cloud platform hosted on Snowflake.

The incidents affected vast numbers of individuals, with the March disclosure exposing personal details such as names, addresses, telephone numbers, email addresses, dates of birth, account passcodes, billing account numbers, and Social Security numbers for roughly 7.6 million active customers and 65.4 million former customers. The July incident involved customer call and text interaction records, as well as cell site identification numbers for a smaller group.

Claimants had until late 2025 to submit their paperwork to Kroll Settlement Administration, the designated settlement administrator. Roughly 4.4 million claims were filed before the deadlines. Under the terms of the agreement, compensation methods are split between documented financial losses and tiered cash payments depending on the exposed data type.

Approved claimants who did not submit documentation of direct financial losses are generally expected to receive base tiered payments ranging from $6.50 to $40, with Tier 1 payments for those whose Social Security numbers were exposed calculated at five times the amount of Tier 2 payments. Conversely, claimants who provided verified documentation of actual out-of-pocket losses can be eligible for significantly larger awards, reaching up to $5,000 for the first breach and up to $2,500 for the second incident.

Regarding the distribution timeline, settlement payments are required to be distributed electronically or by paper check within 60 days of the agreement's effective date. If no appeals are filed to delay the process, the settlement could take effect in mid-November, pushing the start of disbursements into late November or December, though some recipients may receive their funds in early 2027.

Legal representatives and administrators have emphasized that legitimate payments will be processed automatically through the option chosen by the claimant during filing, such as direct deposit, digital payment, or mailed check. Customers have been warned to remain cautious of unsolicited messages, phone calls, or emails demanding sensitive financial information or bank details to release settlement funds.