Millions of AT&T customers affected by two major data breaches are waiting for their share of a $177 million settlement, but the path from court approval to money in their pockets still depends on several important steps.

For Texas customers and other eligible claimants who filed claims, the latest development came Oct. 2, when a federal judge granted final approval to the settlement resolving lawsuits over two separate data incidents in 2024. The agreement establishes compensation for customers whose personal information was exposed, although individual payments will vary depending on the incident and the type of claim submitted.

U.S. District Judge Sidney Fitzwater, based in Dallas, approved the settlement along with $59 million in attorneys' fees for the lawyers who negotiated the agreement, Reuters reported.

The deal faced dozens of objections. Some challengers argued that the $177 million fund was insufficient, particularly when compared with a separate $350 million settlement involving T-Mobile litigation.

Despite those objections, the agreement has cleared a significant legal hurdle. Now, claimants are looking toward the next milestone: the distribution of payments.

How Much Could Customers Receive?

The settlement divides its $177 million into two separate funds tied to the breaches.

The first fund, known as AT&T 1, contains $149 million for customers affected by the initial incident. The second, AT&T 2, allocates $28 million to eligible customers whose information was exposed in the later breach.

Depending on their eligibility, claimants may qualify for compensation based on documented losses or receive a tiered cash payment. The amounts differ according to which incident affected them and whether sensitive information, including Social Security numbers, was exposed.

Estimated AT&T Settlement Payment Amounts

The settlement administrator has outlined three tiers of estimated cash payments:

• Tier 1: $39 to $40. This category covers AT&T 1 claimants whose Social Security numbers were exposed.
• Tier 2: $7.50 to $8.10. This applies to AT&T 1 claimants whose information was exposed but whose Social Security numbers were not.
• Tier 3: $6.50 to $7.10. This category covers eligible AT&T 2 claimants affected by the second data incident.

These figures are estimates, not guaranteed amounts. Final tiered payments will be calculated on a pro rata basis, meaning the available money will be divided among eligible claimants after documented-loss payments and other approved expenses are accounted for.

The more claims that qualify for payment, the more the settlement fund must stretch. As a result, the estimated figures could change before distributions are finalized.

Customers With Documented Losses Could Qualify for More

Some claimants may be eligible to receive compensation for documented losses rather than a tiered cash payment.

Customers in the AT&T 1 class can seek up to $5,000, while eligible AT&T 2 claimants can request up to $2,500.

However, reaching those maximum amounts is not automatic. Claimants were required to submit evidence showing that their losses were fairly traceable to the relevant data breach.

According to the settlement website, qualifying expenses may include certain costs associated with fraud or identity theft. Other losses, including medical bills, emotional distress and estimated lost wages, were excluded from eligibility.

The distinction is important: simply being affected by a breach does not guarantee reimbursement for every expense or personal consequence a claimant experienced.

When Will AT&T Settlement Payments Be Sent?

Although the judge has granted final approval, claimants should not expect the money to arrive immediately.

According to the official settlement website, distributions will begin after the appeals period expires and the settlement administrator completes its review of claims.

If no appeal is filed, the settlement's effective date is estimated to be Nov. 12, 2026. Under the settlement timeline, payments must then be issued electronically or by paper check within 60 days of that effective date.

An exact payment date has not been announced, and the timeline remains dependent on the completion of the required steps.

For claimants who have already submitted their paperwork, there is one important point: they do not need to file a new claim simply because the judge granted final approval.

The next stage is administrative rather than a new round of applications, unless the settlement administrator communicates otherwise regarding an individual claim.

Nearly 5 Million Claims Have Been Submitted

The sheer number of claimants helps explain why distributing the money is a substantial undertaking.

According to the court's final approval order, the settlement administrator had received 4,918,073 claim forms as of Aug. 24, 2026. That total included 754,263 paper submissions and 4,163,810 electronic claims.

The volume places considerable demands on the process of checking eligibility, determining payment categories and calculating the final amounts available to each group.

CT Insider reported that the claims were distributed across the payment tiers as follows:

• Tier 1: 1,654,046 claims.
• Tier 2: 687,859 claims.
• Tier 3: 1,582,248 claims.

Those figures illustrate the scale of the settlement and the number of customers who could receive compensation. They also underscore why the final amounts cannot be calculated simply by dividing the total settlement fund by the number of people who filed claims.

Different claim categories draw from different funds, and documented-loss payments and approved expenses must be accounted for before tiered distributions are finalized.

Where Claimants Can Check for Updates

Customers who have already filed claims can monitor the official settlement website for information about the payment process, deadlines and other developments.

The settlement is being administered by Kroll Settlement Administration.

• Official website: telecomdatasettlement.com
• Phone: 833-890-4930

Claimants should use the official settlement administrator's resources to check the status of the case and review any instructions relevant to their submissions.

What Happened in the Two AT&T Data Breaches?

The settlement stems from two separate incidents in 2024 that exposed customer information and triggered lawsuits against the telecommunications company.

First Breach: Data From 73 Million Current and Former Customers

The first incident became public in March 2024, when a dataset containing information associated with approximately 73 million current and former AT&T account holders surfaced on the dark web.

AT&T later said the exposed information involved about 7.6 million current customers and 65.4 million former customers.

The compromised data included sensitive details such as Social Security numbers, addresses and passcodes. The information appeared to date back to 2019 or earlier, raising concerns about the potential consequences for people whose records had been exposed.

The breach prompted legal action and ultimately led to the settlement fund known as AT&T 1, which provides $149 million for eligible claimants affected by the incident.

Second Breach: Call and Text Records Exposed

A second incident came to light in July 2024, when AT&T disclosed that hackers had illegally downloaded customer data from its workspace on a third-party cloud platform operated by Snowflake.

Unlike the first incident, which involved a broad collection of personal information, the second breach centered on call and text message records covering a period of roughly six months in 2022.

The records involved nearly all AT&T cellular customers, according to the company's disclosure.

The exposure raised fresh questions about the security of customer information stored and processed through external technology platforms. It also formed the basis for the separate AT&T 2 settlement fund, which contains $28 million for eligible claimants affected by the second incident.

AT&T Denies Wrongdoing but Agreed to Settle

AT&T has denied wrongdoing in connection with the litigation.

The company previously told Reuters that it agreed to settle to avoid the expense and uncertainty associated with prolonged legal proceedings.

The agreement resolves the lawsuits covered by the settlement without eliminating the broader concerns surrounding the exposure of millions of customers' personal information.

For claimants, the immediate focus is now on eligibility reviews, final payment calculations and the distribution timetable. For AT&T, the agreement brings a major legal dispute closer to resolution while leaving the company to contend with the reputational consequences of two significant data incidents.

What Claimants Should Know Now

The approval of the $177 million settlement is an important step, but it does not mean every claimant will receive the same payment or that money will arrive immediately.

Eligible customers may qualify for tiered payments or compensation for documented losses, subject to the rules governing each settlement class. The advertised tier amounts remain estimates, and final distributions depend on the settlement funds available after other approved payments and expenses are handled.

If the settlement becomes effective on the estimated date of Nov. 12, 2026, payments are required within 60 days of that date. However, the timeline could be affected by an appeal or other administrative developments, and no exact distribution date has been confirmed.

With nearly 5 million claims submitted, the settlement represents a major effort to compensate people affected by the two breaches. For customers still waiting, the most useful next step is to follow updates from the official settlement administrator rather than assume that court approval means an immediate deposit or check.

The legal milestone has been reached. Now, claimants are waiting for the money to follow.