AT&T 2024 Data Breach Settlement: Who Could Still Receive a Payout?

Short answer: A person could receive money from the AT&T 2024 data incident settlement only if they belonged to one of the settlement classes and submitted a valid claim by December 18, 2025. That filing deadline has passed, so people who never filed cannot start a new claim now. A timely claim may still be processed, and some people whose claims were flagged or rejected may have a limited, notice-specific way to respond.

As of October 27, 2026, the federal court has granted final approval, but the settlement administrator is still handling claims and payments. The judge approved the settlement on October 2, 2026. The settlement agreement ties distribution to an “Effective Date” that follows the appeal period; it requires payment within 60 days after that date. The administrator has not posted a specific payment date on the official AT&T settlement website.

Which AT&T data incident could include you?

The settlement covers two separate incidents announced in 2024. AT&T announced the first on March 30, 2024, after AT&T-specific fields appeared in a data set released on the dark web. The second, announced July 12, 2024, involved data downloaded from an AT&T workspace on a third-party cloud platform. The settlement created a different class for each incident, so being in one does not automatically mean you were in the other.

A person who qualified for both is an “Overlap Settlement Class Member.” The settlement allows a claim under each class, but the same receipt, expense, or other loss documentation cannot be used twice for separate documented-loss requests. The full definitions and exclusions appear in the settlement documents and the court’s October 2 final-approval opinion and order.

What payout options were available?

The settlement created two funds: $149 million for AT&T 1 and $28 million for AT&T 2. Those totals are not checks for each class member. Each fund also covers administration and court-approved costs, and individual amounts depend on valid claims.

• AT&T 1 documented losses: A claimant could seek up to $5,000 for qualifying losses incurred in 2019 or later that were fairly traceable to the first incident. The claim needed reasonable supporting documentation, such as receipts or other records; a self-written statement alone was not enough. If approved documented-loss claims exceed the $25 million allocation for that category, payments can be reduced proportionally.
• AT&T 1 tier payment: As an alternative to documented losses, class members could choose a pro rata payment. Tier 1 applies when the person’s Social Security number was included and is set at five times Tier 2. Tier 2 applies when other covered data was included, but not the Social Security number.
• AT&T 2 documented losses: A claimant could seek up to $2,500 for losses incurred on or after April 14, 2024, and fairly traceable to the second incident. An account owner could submit for themselves and line/end users. If a line/end user submitted their own claim, that was treated as the valid claim for that user.
• AT&T 2 tier payment: Account owners could choose a pro rata Tier 3 payment instead of a documented-loss payment. Line/end users were limited to documented-loss payments and could not receive a tier payment.

“Up to” is a cap, not a promised amount. The settlement administrator must verify class membership and the claim. Tier payments depend on the amount left after fees, administration costs, and approved documented losses. The final-approval opinion cited variable estimates of roughly $39–$40 for one tier and about $6.50–$8.10 for other tiers, but those figures are estimates, not guaranteed checks. The administrator’s FAQ explains which losses count; it excludes reimbursed expenses, emotional distress, estimated lost wages or time, and credit-score reductions.

Can someone still do anything now?

If you filed on time, check the email address and mailing address on your claim for a Kroll status notice. The ordinary deadline to answer a Notice of Deficient Claim Form was September 8, 2026, which has also passed. However, the October 2 court order approved a separate process for certain claims flagged as potentially fraudulent: Kroll must send an email with a Validation Form and instructions. The order says a claimant seeking to cure that rejection must mail the signed original within 21 days of the notice email. Some membership-verification denial notices also provide their own response form and deadline. Follow the instructions in the specific notice immediately; these deadlines are short and are not a chance to file a brand-new claim.

To check whether a notice is genuine or ask about an existing claim, use the contact details on the court-authorized settlement site or call Kroll at (833) 890-4930. AT&T says Kroll, rather than AT&T, administers the settlement. Do not assume that a general AT&T data-breach notice, current customer status, or a credit-monitoring offer by itself establishes eligibility. The key questions are whether your data matched one of the settlement classes, whether you filed by the deadline, and whether Kroll approved or is still reviewing that claim.