AT&T Data Breach Settlement Payouts Could Hit $5,000. Here’s Who Qualifies

AT&T customers caught up in two 2024 data breaches could start seeing settlement payments within months. A federal judge granted final approval to the $177 million AT&T data breach settlement on Oct. 2, according to the official settlement website.^[1] Claims backed by documented losses could pay up to $5,000, though most people will see far less.

The settlement covers two separate breaches in 2024, and together they reached a big share of U.S. phone users. If you’ve had an AT&T phone line in recent years, your information was likely in one or both.

The deadline to file a claim was Dec. 18, 2025, and no late claims are being accepted.

Thanks for subscribing!

Please check your email for your first message.

Never miss the privacy news that affects you.

Join thousands who get the latest security news, scams, and policy changes every week, right to their inbox.

Sign me up

By submitting this form you agree to receive emails from All About Cookies and to the privacy policy and terms.

How much you could get

The settlement is split into two funds: $149 million for people affected by the March breach and $28 million for people affected by the July breach, according to the judge’s final approval order. Some people are in both groups.

If you were affected by the March 2024 breach, you could choose one of two payment types, according to the official settlement website:

• Up to $5,000 for losses from 2019 or later that you could document and tie to the breach
• A flat cash payment if you didn’t claim documented losses. People whose Social Security numbers were exposed get five times as much as people whose other data was exposed.

If you were affected by the July 2024 breach, you could claim up to $2,500 for documented losses on or after April 14, 2024. Account owners could also choose a flat cash payment instead, and they could file for other users on their account.

The flat payments are the part most people will see, and they’re small. Kroll, the company running the settlement, estimates them at:

• $39 to $40 if your Social Security number was exposed in the March breach
• $7.50 to $8.10 if other personal data was exposed in the March breach
• $6.50 to $7.10 for the July breach

Those amounts are small partly because of what comes out first. The judge approved $59 million in attorneys’ fees, one-third of the total settlement. Payments for documented losses and the cost of running the settlement also come out before the flat payments are split up.

When payments could arrive

Payments must go out electronically or by paper check within 60 days of the settlement’s effective date, according to the court order. That date comes after the window for appeals closes. If no one appeals, the effective date could land around Nov. 12. That puts likely payouts between December 2026 and early 2027.

Fraud was a big problem in this settlement. Kroll received 4,918,073 claims. Of those, 804,381, or about 16% of all claims received, were declined for fraud, according to the court order. If your claim was denied because Kroll couldn’t confirm you were part of the settlement, the settlement website says you have 22 days from the date of your notice to mail back a response form.

The breaches behind the settlement

The first breach became public on March 30, 2024. AT&T said a data set released on the dark web held information on about 7.6 million current and 65.4 million former account holders. The data appeared to date from 2019 or earlier. According to the settlement website, it included some combination of:

• Names
• Addresses
• Phone numbers
• Email addresses
• Birth dates
• Account passcodes
• Billing account numbers
• Social Security numbers

The second came on July 12, 2024. In an SEC filing, AT&T said hackers had copied files from its workspace on a third-party cloud platform between April 14 and April 25, 2024. The files held records of calls and texts from May 1 to Oct. 31, 2022, plus Jan. 2, 2023. While they didn’t include what was said in calls or texts, it did show which numbers customers contacted, how often, and how long calls lasted.

For a small group of people, they also included cell site identification numbers, which can point to a phone’s rough location. CNN reported that the breach affected “nearly all” of AT&T’s cellular customers. Customers of smaller carriers that run on AT&T’s network may also be covered, according to the settlement website.

AT&T denies any wrongdoing and settled without admitting liability.

What the AT&T breach means for you

The settlement ends the lawsuit. It doesn’t end the risk, and it also doesn't include free credit monitoring. 

That matters because this data doesn’t expire. The March data was already years old when it showed up on the dark web, which shows how long stolen information stays useful to criminals. You can change a password. You can’t easily change your Social Security number or birth date.

The phone data matters in a less obvious way. Your phone number is often how your bank, email, and payment apps confirm it’s really you. Paired with a leaked account passcode, it could help a scammer try a SIM swap, where they move your number to their own phone and start receiving your security codes. Call and text logs can also show who you contact regularly, like your bank, your doctor, or your kid’s school. That kind of detail could help a scammer write a text you’d actually believe.

Payment season brings its own risk. As checks start landing, expect fake messages promising to help you “claim” or “speed up” an AT&T payout. The settlement website says its official email notices come only from attsettlement@e.emailksa.com. The Federal Trade Commission says legitimate refund programs never charge upfront fees or ask for your Social Security number or bank account information. If a message asks for either, treat it as a scam.

What to do right now

Whether or not you filed a claim, these steps could cut off the most likely follow-up attacks:

1. Set up identity theft monitoring. This settlement doesn’t include credit monitoring, so you’ll need to set it up yourself. Identity theft protection services monitor your Social Security number and financial accounts for suspicious activity, and it includes identity theft insurance and help fixing things if your identity is stolen. 
2. Freeze your credit. A freeze at Equifax, Experian, and TransUnion blocks anyone from opening new accounts in your name. It’s free, and you can lift it whenever you need to.
3. Lock down your phone number. Change your AT&T account passcode if you haven’t since 2024. Ask your carrier about a port-out PIN or an account lock to make SIM swaps harder.
4. Move off text-message codes where you can. Switch important accounts to an authenticator app for multi-factor authentication, so a stolen phone number alone can’t get someone in.
5. Check settlement messages before you click. Real emails come only from attsettlement@e.emailksa.com. When in doubt, go straight to TelecomDataSettlement.com or call (833) 890-4930.
6. Watch for warning signs. Unfamiliar accounts, credit inquiries, or sudden loss of cell service can all point to someone using your identity.

Bottom line

The AT&T data breach settlement may put a small check in your hands over the next few months, but the data behind it isn’t going anywhere. Social Security numbers, birth dates, and phone records from these breaches could stay useful to scammers for years. Freezing your credit today takes about 15 minutes and closes the biggest door. Adding identity theft protection covers the ones you can’t watch yourself.

Author Details

Kalleigh Lane

About the Author

Kalleigh Lane is the Managing Editor at All About Cookies, where she helped develop the site's star rating system for product reviews and specializes in testing VPNs, ad blockers, and parental controls on Android and PC. She brings more than five years of experience editing and writing across cybersecurity, tech, and finance, and she has authored and edited over 300 articles for All About Cookies. Before joining AAC, she worked as a journalist and editor at CTV News and the Globe and Mail, and she holds a Master of Arts in English Literature from the University of Toronto.