AT&T data-breach settlement approved, with payments pending appeals

The U.S. District Court for the Northern District of Texas gave final approval on October 2, 2026, to AT&T’s $177 million settlement covering two data breaches disclosed in March and July 2024. The agreement separates $149 million for claims tied to the March incident and $28 million for the July incident. Eligible claimants can seek as much as $5,000 for documented March-related losses and $2,500 for documented July-related losses, while payments remain subject to the appeals process and claims administration.

The settlement creates a $177 million obligation for AT&T and provides a compensation process for eligible customers who filed claims. Payments must be sent within 60 days of the settlement’s effective date, but appeals or administrative work could delay distributions.

  • 1The federal court approved the settlement on October 2, 2026.
  • 2The settlement provides $149 million for the March incident and $28 million for the July incident.
  • 3Maximum documented-loss payments are $5,000 for the March incident and $2,500 for the July incident.
  • 4The March incident involved approximately 7.6 mn active customers and 65.4 mn former customers, according to AT&T’s disclosure.
  • 5The claims deadline was December 18, 2025.
  • 6Payments are required within 60 days after the settlement’s effective date.
  • Claim totals differ across materials: one reports approximately 3.92 million valid claims, while others report 4.9 million claims and, in one account, 1.1 million rejected claims or 804,000 claims flagged for fraud.
  • Payment timing is not settled: materials cite possible distributions in December 2026, by January 11, 2027, or other dates, while one material gives December 2025 and another gives an estimated effective date in 2024.
  • The exact payment for each claimant remains unknown because it depends on eligibility, valid claims, documented losses, available funds and settlement expenses.

Sources