AT&T settlement: status, who qualifies and how to claim (2026)
AT&T data breach settlement guide for 2026: current status, who qualifies, how to file a claim, realistic payouts and how to spot fake notices.

Here's where things stand. The at&t data breach settlement people are searching for stems from two incidents AT&T disclosed in 2024 — a March release of data tied to roughly 73 million current and former customers, and a July disclosure that call and text metadata for nearly all wireless customers was accessed via a third-party cloud vendor. Class actions have been consolidated in federal court and are working through the settlement process. If a final settlement is approved, expect a claims window with an official administrator site — until then, no legitimate check is being mailed. You can see what you're owed and get notified the moment an AT&T claim opens.
What the AT&T lawsuits are about
Two AT&T disclosures in 2024 drive most of the current litigation. In March 2024, AT&T confirmed that a dataset containing information tied to roughly 73 million current and former account holders had been posted online, reportedly including names, addresses, phone numbers, dates of birth and, in many cases, Social Security numbers. In July 2024, AT&T disclosed a separate incident in which threat actors accessed call and text metadata for nearly all wireless customers over a period in 2022 through a third-party cloud environment. That metadata included phone numbers contacted and call/text counts and durations, but not message content.
Plaintiffs allege AT&T failed to safeguard sensitive customer data and delayed notification. The cases raise standard data-breach claims: negligence, breach of contract, and violations of state consumer-protection and data-breach notification statutes. If you want the basics on how these suits are structured, our primer on what a class action lawsuit is walks through the mechanics.
Current status of the cases (as of 2026)
Dozens of individual lawsuits filed after the 2024 disclosures were consolidated into multidistrict litigation in federal court and are proceeding through pretrial motions and settlement discussions. Reporting through 2025 and into 2026 has referenced a proposed settlement framework, but until a judge grants final approval and a claims administrator opens an official portal, nothing is payable.
Here's what a typical timeline looks like once a proposed deal is announced:
- Preliminary approval — the judge signs off on the proposed settlement and notice plan.
- Notice period — administrators email and mail class members with a claim ID.
- Claims window — usually 60–120 days to file.
- Final approval hearing — objections heard; judge issues final order.
- Payout — funds distributed 3–9 months after final approval, longer if appeals are filed.
For a deeper walk-through, see how a class action lawsuit works.
Who qualifies (and how to check)
Eligibility will be tied to whether your personal information appeared in one or both breaches. Based on the incidents as disclosed, the likely class definitions are:
- March 2024 breach: individuals whose information appeared in the leaked dataset — largely current and former AT&T account holders whose accounts were open at some point during a defined class period.
- July 2024 breach: nearly all AT&T wireless customers whose call/text metadata was accessible during the affected window in 2022, plus certain customers of mobile virtual network operators that used AT&T's network.
The administrator will typically send a notice with a Claim ID and PIN to eligible people. If you never received a notice but think you should have, most administrator portals let you look up your status by name, email, or phone. See our guide on how to check if you're part of a class action and who is eligible for a class action settlement.
How to file when the AT&T claim opens
When AT&T's claims portal goes live, the process will look very similar to other large data-breach settlements (Equifax, T-Mobile, Bank of America). You do not need a lawyer, and filing is free.
- Confirm the site is real — the URL should be listed in the court order and hosted by a known administrator (Kroll, Epiq, Angeion, JND, Rust, Simpluris).
- Enter your Claim ID and PIN from the notice, or use the lookup tool with your name and address.
- Choose your benefit tier: flat cash payment (no proof), documented out-of-pocket losses (upload receipts), or credit-monitoring enrollment.
- Add proof for the higher tier if applicable — bank statements, fraud affidavits, time logs at a reasonable hourly rate.
- Select payout method: ACH direct deposit, paper check, prepaid card or digital wallet (ACH is usually fastest).
- Submit before the deadline and save the confirmation number — you'll need it if the administrator has questions.
Realistic payout expectations
No one — including AT&T — can promise a specific number until the fund size, class size and claim rate are known. But data-breach settlements over the past five years give a useful range. The bigger the fund and the more documentation you provide, the higher the payout.
| Settlement | Fund size | Flat / no-proof | Documented losses cap |
|---|---|---|---|
| Equifax (2019) | $380M+ consumer fund | Credit monitoring or up to $125 | Up to $20,000 |
| T-Mobile (2022) | $350M | ~$25 flat (higher in CA) | Up to $25,000 |
| Capital One (2022) | $190M | Reimbursed time at $25/hr | Up to $25,000 |
| Bank of America (2024) | $425M | $50 flat | Up to $600 documented |
Red flags for fake AT&T settlement notices
Whenever a big breach hits the news, scam emails and texts follow. Real class-action notices don't ask you to pay anything, don't demand your full SSN over the phone, and don't route you to a random domain. Watch for:
- Urgency language — "final 24 hours" or "claim expires tonight" when the actual deadline is months away.
- Payment requests — a legitimate claim never charges a fee to file.
- Odd domains — anything that isn't a `.com` operated by a known administrator, or that adds extra words like `att-settlement-refund-2026.com`.
- Full SSN over the phone — administrators use claim IDs; SSNs, if requested, go through a secure portal, not a call center rep.
- Gift-card or crypto payouts — real settlements pay via ACH, check, or prepaid Visa/Mastercard.
If you're unsure whether a notice is real, cross-reference the administrator name against the court's docket or a trusted listing like how to find open class action settlements.
What to do right now — while you wait
Even before AT&T's claim window opens, there are useful steps you can take. A free credit freeze at Equifax, Experian and TransUnion blocks new-account fraud and can be lifted in minutes when you need credit. Enrolling in the free credit monitoring AT&T offered after the 2024 disclosures is worth doing — it doesn't waive your right to claim later.
While you wait on AT&T, there are open settlements you can file today with little or no proof. Our roundup of no-proof settlements and how much no-proof settlements typically pay is a good starting point, and our settlement directory lists what's open with deadlines. When AT&T opens, you'll want a system already in place — our step-by-step claim-filing guide walks through it.
Nothing in this article is legal or tax advice. Class-action payouts may be reportable income; check IRS Publication 4345 or a tax professional.
Glossary
- MDL (multidistrict litigation)
- A federal procedure that consolidates related lawsuits from around the country before one judge for pretrial handling.
- Class period
- The date range during which someone must have been an AT&T customer (or had their data affected) to be part of the class.
- Claims administrator
- The third-party firm (e.g., Kroll, Epiq, Angeion) hired to send notices, run the claims site, verify claims and mail payments.
- Preliminary vs. final approval
- Two separate court orders — preliminary lets notice go out and claims begin; final approves the deal and triggers payment after any appeals.
- Documented losses tier
- A higher claim option that reimburses receipted expenses (fraud, credit repair, time) — usually pays several times more than the flat tier.
- Opt out
- Formally excluding yourself so you can sue AT&T individually — you must file the opt-out by the deadline in the notice.
FAQ
Not as of August 2026. Cases are consolidated in federal court and moving through the settlement process. Nothing is payable until a judge grants final approval and an administrator opens an official claims site.
Impossible to promise exact numbers before the fund and claim rate are set. For context, recent large data-breach deals paid roughly $25–$100 to no-proof filers and up to $20,000–$25,000 for documented losses like identity theft or credit repair.
No. Class-action claim forms are designed for consumers and are free to submit. Attorney fees come out of the common fund, not your check.
Check the sender domain against the court-approved administrator, and never pay a fee or share your full SSN over the phone. If in doubt, go directly to the administrator's site listed in the court order rather than clicking a link.
You're likely still eligible. Data-breach classes typically include current and former account holders whose data was in the breach, regardless of whether you still have AT&T service.
No. Filing does not change your service, and cash payouts are not reported to the credit bureaus. Payouts may be taxable — see IRS Publication 4345 for guidance.
- AT&T — 2024 data incident notice
- FTC — Data Breach: What to do next
- ClassAction.org — Open settlements
- IRS Publication 4345 — Settlements taxability
- Federal Rules of Civil Procedure Rule 23 (class actions)
- Kroll — Settlement Administration
This article is based on public information as of Aug 22, 2026; features, prices and deadlines change. Owed is not a law firm and nothing here is legal, tax or financial advice. Corrections →


