Consumer class action (MDL No. 3114) · U.S. District Court for the Northern District of Texas
- Who filed — and where
- Consumer suits over two separate breaches, consolidated in the Northern District of Texas. Settlement signed May 30, 2025; final approval October 2, 2026 (Judge Sidney A. Fitzwater).
- What it is about
- Two incidents: a compromise dating to 2019 whose data set — including Social Security numbers — appeared on the dark web and was announced on March 30, 2024; and a 2024 download of call-log data from AT&T's workspace on the Snowflake cloud platform, announced July 12, 2024.
- The announced figure
- Two non-reversionary cash funds totalling $177 million: $149 million for the first incident and $28 million for the second. “Non-reversionary” means money left over does not go back to AT&T.
- The cost side — as documented
- In its October 2, 2026 order the court approved attorneys' fees of exactly one-third of each fund: $49,666,666.66 and $9,333,333.33 — $59 million in total — paid from the funds before claimants see a dollar. The judge separately flagged settlement administration costs as a matter that will keep the court's attention; the final administration figure is not yet stated in the record — watching.
- What Americans actually got back
- Nothing yet — not yet paid, watching. The administrator, Kroll, received 4,918,073 claim forms. Kroll's estimates in the court record put the tiered cash payments at roughly $39–$40 for first-incident claimants whose Social Security number was exposed, $7.50–$8.10 for other first-incident claimants, and $6.50–$7.10 for second-incident claimants; documented losses are payable up to $5,000 and $2,500 respectively. Those are the administrator's estimates in a court filing, not amounts anyone has received.
- Status
- Final approval granted October 2, 2026. Distribution follows the settlement's effective date; this entry will be updated when payments are documented.